Some of the places sending a XD_KICK net command when an invalid packet was detected were using the node instead of player number, which is no good as it would effectively kick the wrong person...
Also plrinfo had a field called node despite containing a player number.