CrazyLogin
Version 7.24
Its recommended to run your server in online mode!
Minecraft is a excellent game. If you want to play it, you should buy it, like every other game you play.
Description
Adds per player passwords to your server. This will increase your server's protection against griefers and account thiefs.
Keep these two things in mind:
- The protection is only as good as your passwords.
- The server is still less secure then a server in online mode.
- My plugin is not limited to offline mode servers,
therefore you can increase security for both server types (offline and online mode servers).
- My plugin is not limited to offline mode servers,
Features
- This plugin supports two modes. Maybe-Password and Password-Only
- Maybe-Password:
The user can create a password, if he wants to
(a password is required for ops/players with permission) - Password-Only:
The user has to create a password and login.
- Maybe-Password:
- Users who aren't logged in, cannot chat, build, fight, drop items, move, teleport.
- (Optional) Ability to hide/change Join/Quit-Messages, hide players who aren't logged in.
- Multiple password Encryption algorithms
- AuthMe, xAuth support
- Integrated Config, Flat, MySQL and SQLite-Database support.
- Integrated Logging support.
- Integrated CrazyPipes support.
- Session support
- Supports single sessions
- saveLogins (teleport to spawn until login).
- If you do not logout and autoLogout is disabled, you can rejoin from the same IP.
- Permission + option to disable ingame registration.
- forceSaveLogin option to hide the players current location until login
- this fixes the issues with AntiCheat being kicked for flying due to anti move protection.
- maxRegistrationsPerIP and maxOnlinesPerIP options
- Command usage is stricktly limited, when not logged in (whitelist).
- Possibility to block guest commands, chat and join.
- Warn players with permission, if some fails to login or execute a command if he isn't allowed to.
- (Optional) Kick players who don't register, don't login, fail to login, execute a command.
- (Optional) TempBan players who don't login or fail to login.
- Adminlogin and Tokenlogin commands available
- Command to logout automatically when leaving the server
- Command to expire passwords (force players to change their passwords)
- Filter- & Sortable Accountlist
- Playerinfo (Name, IP, Connection and more)
- Ability to delete inactive accounts.
- PluginAPI available
- Client AutoLogin Plugin available (can be blocked)
Requirements
- CrazyCore (Version 10.7.7 or later)
Related Plugins
- CrazyLoginAutoLogin (Client-Plugin)
- CrazyCaptcha (Captcha)
- CrazyLoginFilter (IP/Connection Access Filter)
- CrazyLoginRank (Join Ranking)
Configuration & Options
(with description of all available options)
Commands with their Permissions
Issues ?
CommandHelper
Have a look at this CommandHelper Extension
Factions
Factions uses a very special way to execute commands, which bypasses default command protection.
Use this plugin to fix that until Faction fixed that:
CrazyLogin_FactionProtection
Convert database
You can convert your database with /crazylogin mode database <Type>".
Especially on huge flat databases this may take very long.
You can use this tool to convert your flat database to a mysql import script.
CrazyLogin_Flat_2_MySQL
(Notice: This file has NOT been reviewed by any Bukkit staff!)
Just copy this jar to your accounts.db then execute this jar.
This will create an accounts.db.sql file.
Others ?
Create a ticket or post a message!
Metrics

(Generated by MCStats.org)
Languages
- en_GB (English)
- de_DE (German - Deutsch)
- bg_BG (Bulgarian - български, thanks to LocoFreak)
- el_GR (Greek - ελληνικά, thanks to razorrazor)
- es_AR (Spanish (Argentina) - argentino, thanks to LynnJordison)
- es_ES (Spanish - Español, thanks to Sirikon, vicente947)
- fi_FI (Finnish - Suomi, thanks to suomenlippis)
- fr_FR (French - Français, thanks to FireBurst699)
- it_IT (Italian - italiano, thanks to giuditta1974)
- kr_KR (Korean - 한국어, thanks to TABtech)
- lt_LT (Lithuanian - Lietuvos, thanks to donatass162)
- nl_NL (Dutch - Nederlands, thanks to blipman17, jekeke123)
- pl_PL (Polish - polski, thanks to MegaManNT)
- pt_BR (Portuguese (Brazil) - brasileiro, thanks to bchilelli)
- ro_RO (Romanian - Romana, thanks to Cozzmy13)
- ru_RU (Russian - русский, thanks to kilolife, SannyOK)
- zh_CN (Chinese - 简体中文, thanks to cdcp998, mindcat, Liouftgoo)
- zh_TW (Traditional Chinese - 繁體中文, thanks to Chanmo)
(Please post additional translations here, so i can share them to everybody!)
-
View User Profile
-
Send Message
Posted Sep 27, 2012@ThisUsernameIsMine
When i added that feature, i thought that server owners might replace this message with a custom one like:
visit www.myhomepage.mc to register.
i think i will make some changes so you can put an empty message there and this will not be displayed.
EDIT: done, it is included in the next version
-
View User Profile
-
Send Message
Posted Sep 27, 2012@TheOneMadHawk
Thanks for the tip, but they had multiple ip addresses :-)
I have a new request/suggestion for you:
When disabling registrations, new players still get the message to register an account.
This isn't very logical as account-registration is disabled.
Perhaps you can make it so that they only get the message that account-registration is disabled? ;)
-
View User Profile
-
Send Message
Posted Sep 27, 2012@ThisUsernameIsMine
if they are using the same ip
you can use /crazylogin player info <SpamBotName>
and it will show you all associated accounts
i think about adding a new piped command for that too.
/crazycore player associates <SpamBotName> > /ban $0$ | /crazycore player delete $0$
-
View User Profile
-
Send Message
Posted Sep 27, 2012@TheOneMadHawk
Oh, was editing my post xD
I already deleted some of those accounts but it's not that easy when there are many of them ;)
Thanks for considering it, i'm looking forward to it! :-)
-
View User Profile
-
Send Message
Posted Sep 27, 2012@ThisUsernameIsMine
This is a good idea, but i don't know how to integrate that into CrazyLogin->i will create a new plugin for that.
That blocks commands until entering that captcha.
It will have an option to disable itself when login succeded.
You can easyly erase spambot data with
/crazycore player delete <SpamBotName>
-
View User Profile
-
Send Message
Posted Sep 27, 2012@ TheOneMadHawk: Could you please add an extra security-layer to the register and/or login process i.e. by using a captcha or other user-input required verification?
Had soms spambots on the server and they were able to register themselves ;-)
-
View User Profile
-
Send Message
Posted Sep 26, 2012@PinkSlipNC
It is possible.
But you have to convert your H2 database to a mysql one first.
If i find a good tutorial i may add h2 database support soon.
-
View User Profile
-
Send Message
Posted Sep 26, 2012I'm frustrated wanted to port xAuth to CrazyLogin, is it possible?
-
View User Profile
-
Send Message
Posted Sep 25, 2012@Enrux
autoDelete will delete every playerdata which are older than 60 days, no matter how much longer they have been idle.
Next version will include a feature to protect certain accounts against deletion.
-
View User Profile
-
Send Message
Posted Sep 24, 2012auto-delete: 60 will delete users in database who doesn't connect for that time?
and also I currently have in the database file users who have been online for 120+ days, if now I set auto-delete to 60 days will it delete does who are already older? or it will delete new users who pass the 60 days offline?
-
View User Profile
-
Send Message
Posted Sep 24, 2012@VOWFallen
Oh sorry.
Its called EncryptHelper.convertToHex(hash);
I renamed this method in the next version.
-
View User Profile
-
Send Message
Posted Sep 23, 2012I got this error that will not allow me to compile. The method byteArrayToHexString(byte[]) is undefined for the type EncryptHelper.
-
View User Profile
-
Send Message
Posted Sep 23, 2012@VOWFallen
If you use such a specific encryption i guess you are using a web cummunity or similar things.
Then you can use the WebCrypt encryptor.
Custom algorithms must be programmed and compiled.
Download and install Java JDK
Download and Install/extract eclipse
Download CrazyLogin_API.jar
Open Eclipse
Create new project
Add CrazyLogin_API.jar as Libary
Create a new java file MyEncyptor.java with CustomEncyrptor as Superclass
Implement this methods:
This code does exactly what you told me.
then eighter create a new plugin and just add this class or push that file (MyProject/bin/MyEncryptor.class) into CrazyLogin.jar
edit your config.yml
Done
(I guess there are other ways too but this is the simpliest i know)
Theoretically i could compile it for you but i have very few time till 29.09
-
View User Profile
-
Send Message
Posted Sep 21, 2012@TheOneMadHawk
Thanks and no problem, i also work on something atm :-)
Good luck!
-
View User Profile
-
Send Message
Posted Sep 21, 2012How would we use a custom algorithm? < Noob Sry :) For instance how would I add a constant like F932MGS74 then a sha1 password so it would be like this: sha1(F932MGS74[passwordhere])
-
View User Profile
-
Send Message
Posted Sep 21, 2012@ThisUsernameIsMine
sorry for that.
I will change that with the next update, may take some time because i currently work on CrazyCore v9 and CrazyLogin v7
-
View User Profile
-
Send Message
Posted Sep 21, 2012When deleting an account of someone whom's name partly matches the name of someone that is currently on the server, the online player's account is deleted.
I believe this is caused by an auto-complete feature, because i tried to delete account: mike, but there was a player named: mikehenk on the server and that one was deleted instead.
-
View User Profile
-
Send Message
Posted Sep 21, 2012Perfect, thank you very much !
-
View User Profile
-
Send Message
Posted Sep 21, 2012@Nymphx76
Set alwaysNeedPassword to false
/crazylogin mode alwaysNeedPassword false
or via config.yml (and /crazylogin reload, if server is running)
-
View User Profile
-
Send Message
Posted Sep 20, 2012Hi !
This is an amazin plugin, but how to allow moving for players not registered ?
I want, when unregistered player join server, it can move and talk (and use commands allowed by permissions bukkit).
BUT, if the player is registered, disallow all (talk, move etc...) before login.
If this is possible i want to know how =)
Because "moverange" are activated for registered and unregistered players, it's bad for me.
Thank you in advance for your help