LoginSecurity

Table of Contents

LoginSecurity

LoginSecurity is a lightweight password authorization plugin. You can optionally set a password each time you enter the server, adding a double layer of security to your account. The password is stored inside the configuration file, nobody else except the server owner can access or modify it.

How does it work?

Install the pluign to your /plugins/ directory, then start your server.
Type /register <password>, your account is now locked with a password.
For each time you login, make sure to use /login <password>.

Features

Register your account optional or required (change in config)
5 Useful commands to mangage your password
Advanced administrative control
Advanced documentation via wiki
Secure password storage using BCrypt
Secure sessions storing to improve user experience
Customizable time-out
Map captcha upon registration (user friendly)
Conversion from AuthMe and xAuth (check wiki for more info)
Premium support through AutoIn
Automatic update with changelog overview
Username filtering (length and characters)
Highly detailed configuration
Automatically updated translation manager (user-submitted)
Prevents being kicked by orther players loging in with your name

Session login allows the user to log in right after they logged out and not have to type in their password again. (1 minute time limit of being logged out, stores IP during that time to keep everything safe)

Commands

/lac - Admin command, rmpass and reload

/register <password> - Set your password

/login <password> - Login with your password

/changepass <old> <new> - change your password

/logout - Logout

Permissions

loginsecurity.admin - allows admin command
loginsecurity.update - shows update notifications

Video

Thanks to ServerMiner for making this informative tutorial
Orther tutorials: German (by MineCraftler4Live)

Planned

Add translation interface for easier language selection
Suggestions?

Known Bugs

Players can mount/dismount and ride on vehicles while not logged in

Disclaimer

By default, LoginSecurity will check for updates from bukkitdev every 3 hours.
This feature can be disabled by setting "update-checker" to "false"
Anyone with the permission node ls.admin will be notified of updates, and it also able to download them via /lac update.
Which again can be disabled by disabling the update-checker

This plugin utilises Hidendra's plugin metrics system, which means that the following information is collected and sent to mcstats.org:

A unique identifier
The server's version of Java
Whether the server is in offline or online mode
The plugin's version
The server's version
The OS version/name and architecture
The core count for the CPU
The number of players online

The Metrics version Opting out of this service can be done by editing plugins/Plugin Metrics/config.yml and changing opt-out to true.
Additionally, when the language setting is changed, information is retrieved from lang.lenis0012.com to aquire up to date translations.

Donate

If you want to support me working on this project, please donate.
It helps me alot to keep my projects up.
Donate at the top right corner

Comments

ServerMiner
- Join Date: 7/26/2012
- Posts: 39
- Member Details
#1097 ServerMiner

View User Profile

Send Message

Posted Jul 17, 2016
We love your plugin so we decided to create a video to showcase its features!

We created a YouTube video tutorial for you, feel free to use it on your plugin info area: https://www.youtube.com/watch?v=3re8ZqjwreM

Rollback Post to Revision RollBack
_ForgeUser8075891
- Join Date: 12/14/2011
- Posts: 2,145
- Member Details
#1096 _ForgeUser8075891

View User Profile

Send Message

Posted Jul 16, 2016
@leonman1999123

Checking player passwords is not possible. Passwords can be removed by typing /lac rmpass playername

@leonman1999123

The /lac command was broken in older versions of LoginSecurity and is supposed to work from build #4 http://ci.lenis0012.com/job/LoginSecurity%202/4/ and upwards. Though it's probably best to try the latest (newest) build as it might fix some other problems as well (i.e. loss of player inventories). I'm pretty sure it works for 1.9.4 as well.

Last edited by _ForgeUser8075891: Jul 16, 2016

Rollback Post to Revision RollBack
_ForgeUser25410697
- Join Date: 6/3/2016
- Posts: 4
- Member Details
#1095 _ForgeUser25410697

View User Profile

Send Message

Posted Jul 16, 2016
which is for 1.9.4 because I see the new one is for 1.8 .19 1.10. I download this but not work on my server ,can't use /lac

Rollback Post to Revision RollBack
_ForgeUser25410697
- Join Date: 6/3/2016
- Posts: 4
- Member Details
#1094 _ForgeUser25410697

View User Profile

Send Message

Posted Jul 16, 2016
Sorry ,How to check the player password?? and how to remove the password???

Rollback Post to Revision RollBack
_ForgeUser25577927
- Join Date: 6/12/2016
- Posts: 10
- Member Details
#1092 _ForgeUser25577927

View User Profile

Send Message

Posted Jul 11, 2016
The plugin didn't work on my server it just hide and not enabling

Rollback Post to Revision RollBack

_ForgeUser8075891

Join Date: 12/14/2011
Posts: 2,145
Member Details

#1091 Posted Jul 11, 2016

@Zorsus

No:

database.yml

#> Database settings.
#> If you don't know what that means, don't touch this section.
#> Make sure to read the wiki if you a migrating from SQLite for MySQL or vica versa.


# Don't change this if you don't know what it means
isolation: SERIALIZABLE
mysql:
  enabled: false
  host: 'localhost:3306'
  username: 'root'
  password: ''
  # Table names are prefixed with ls_
  database: 'minecraft'

_ForgeUser26223067
- Join Date: 7/11/2016
- Posts: 1
- Member Details
#1090 _ForgeUser26223067

View User Profile

Send Message

Posted Jul 10, 2016
Hello, does this plugin require a MySQL db?

Rollback Post to Revision RollBack
_ForgeUser8075891
- Join Date: 12/14/2011
- Posts: 2,145
- Member Details
#1089 _ForgeUser8075891

View User Profile

Send Message

Posted Jul 9, 2016
@arturek1666

Without SQL?

But there's MySQL and there's SQLite.
I'm experiencing the problem with SQLite, but MySQL is also SQL

So... ?¿?

Last edited by _ForgeUser8075891: Jul 9, 2016

Rollback Post to Revision RollBack
_ForgeUser9583106
- Join Date: 9/7/2012
- Posts: 28
- Member Details
#1088 _ForgeUser9583106

View User Profile

Send Message

Posted Jul 9, 2016
There is an issue with sql when inventory is saved in sql than when server resets players don't have items. The best way is to do it without sql.

Rollback Post to Revision RollBack
_ForgeUser8075891
- Join Date: 12/14/2011
- Posts: 2,145
- Member Details
#1087 _ForgeUser8075891

View User Profile

Send Message

Posted Jul 9, 2016
@lenis0012

Thank you. Though there's more to it.
I've posted an up-to-date post on Spigot forum's LoginSecurity discussion forum.

Rollback Post to Revision RollBack
lenis0012
- Location: Krimpen
- Join Date: 2/11/2012
- Posts: 1,354
- Member Details
#1086 lenis0012

View User Profile

Send Message

Posted Jul 8, 2016
@hutt132

I will look into it. It might take a fgew days as i am on vacation.

@boringwolf

@ThisUsernameIsMine

will take a look as well.

Rollback Post to Revision RollBack

_ForgeUser8075891

Join Date: 12/14/2011
Posts: 2,145
Member Details

#1085 Posted Jul 7, 2016

@hutt132

I have the same but with the default database and with "hide-inventory: true"

So:

Quote:
Hides the player's inventory until they log in.

The inventory is never lost, even after reboot or crash.

unfortunately isn't true =(

@ lenis0012: With the new builds (currently using build #9) i can delete user accounts again but it still throws a NPE when deleting someone's account ;-)

>lac rmpass TijnGamingDutch

[20:29:30 WARN]: [LoginSecurity] Task #225 for LoginSecurity v2.1.4 generated an exception

java.lang.NullPointerException

  at com.lenis0012.bukkit.loginsecurity.libs.pluginutils.modules.command.Command.reply(Command.java:71) ~[?:?]

  at com.lenis0012.bukkit.loginsecurity.commands.CommandAdmin.access$000(CommandAdmin.java:28) ~[?:?]

  at com.lenis0012.bukkit.loginsecurity.commands.CommandAdmin$1.call(CommandAdmin.java:93) ~[?:?]

  at com.lenis0012.bukkit.loginsecurity.session.PlayerSession$2$1.run(PlayerSession.java:146) ~[?:?]

  at org.bukkit.craftbukkit.v1_10_R1.scheduler.CraftTask.run(CraftTask.java:71) ~[spigot-1.10.2.jar:git-Spigot-a9631d2-2239ff0]

  at org.bukkit.craftbukkit.v1_10_R1.scheduler.CraftScheduler.mainThreadHeartbeat(CraftScheduler.java:350) [spigot-1.10.2.jar:git-Spigot-a9631d2-2239ff0]

  at net.minecraft.server.v1_10_R1.MinecraftServer.D(MinecraftServer.java:728) [spigot-1.10.2.jar:git-Spigot-a9631d2-2239ff0]

  at net.minecraft.server.v1_10_R1.DedicatedServer.D(DedicatedServer.java:399) [spigot-1.10.2.jar:git-Spigot-a9631d2-2239ff0]

  at net.minecraft.server.v1_10_R1.MinecraftServer.C(MinecraftServer.java:673) [spigot-1.10.2.jar:git-Spigot-a9631d2-2239ff0]

  at net.minecraft.server.v1_10_R1.MinecraftServer.run(MinecraftServer.java:572) [spigot-1.10.2.jar:git-Spigot-a9631d2-2239ff0]

  at java.lang.Thread.run(Unknown Source) [?:1.8.0_91]

@boringwolf Keep in mind the author/dev of AutoIn has recently abandoned the project (see Spigot resource) and recommends to use the plugin FastLogin instead.

Last edited by _ForgeUser8075891: Jul 7, 2016

_ForgeUser25518006
- Join Date: 6/9/2016
- Posts: 5
- Member Details
#1084 _ForgeUser25518006

View User Profile

Send Message

Posted Jul 5, 2016
http://pastebin.com/HAB0kRtX

The database error

Rollback Post to Revision RollBack
_ForgeUser25518006
- Join Date: 6/9/2016
- Posts: 5
- Member Details
#1083 _ForgeUser25518006

View User Profile

Send Message

Posted Jul 4, 2016
http://pastebin.com/ZLuWFxr2

I have error with AutoIn

Rollback Post to Revision RollBack
_ForgeUser7550340
- Join Date: 9/15/2011
- Posts: 139
- Member Details
#1082 _ForgeUser7550340

View User Profile

Send Message

Posted Jul 3, 2016
LoginSecurity v2.1.3 Spigot 1.10.2

When using the MySQL database and having "hide-inventory: false" in the config, players who have registered have their inventory wiped when they join. Their inventory is still wiped even after logging in.

Here is the error produced when they log in: http://pastebin.com/tJJqHqxv

Their inventory_id in MySQL is set to NULL.

Rollback Post to Revision RollBack
_ForgeUser23854619
- Join Date: 2/27/2016
- Posts: 1
- Member Details
#1081 _ForgeUser23854619

View User Profile

Send Message

Posted Jul 2, 2016
I have a problem, i installed the plugin and switched to offline mode the server, but ALL the players lost their ranks, inventories, etc. A solution? I want to take the server on offline mode

Rollback Post to Revision RollBack
lenis0012
- Location: Krimpen
- Join Date: 2/11/2012
- Posts: 1,354
- Member Details
#1080 lenis0012

View User Profile

Send Message

Posted Jun 28, 2016
Work In Progress

Rollback Post to Revision RollBack
lenis0012
- Location: Krimpen
- Join Date: 2/11/2012
- Posts: 1,354
- Member Details
#1079 lenis0012

View User Profile

Send Message

Posted Jun 28, 2016
@arturek1666

what error?

Rollback Post to Revision RollBack
_ForgeUser9583106
- Join Date: 9/7/2012
- Posts: 28
- Member Details
#1078 _ForgeUser9583106

View User Profile

Send Message

Posted Jun 28, 2016
@lenis0012

There is still error when I connect to mysql with the database I had already had before

Rollback Post to Revision RollBack
lenis0012
- Location: Krimpen
- Join Date: 2/11/2012
- Posts: 1,354
- Member Details
#1077 lenis0012

View User Profile

Send Message

Posted Jun 25, 2016
@mormaii2

I don't know whats going on there.
I will check it out tomorrow :)

Update is coming as soon as i fixed an apparent mysql error
EDIT: Build server is back

Last edited by lenis0012: Jun 26, 2016

Rollback Post to Revision RollBack
To post a comment, please login or register a new account.

Project ID

41702
Created

Jul 7, 2012
Last Released File

Aug 17, 2023
Total Downloads

1,054,518
License

GNU General Public License ver...

Bukkit

LoginSecurity

Bukkit Plugins

LoginSecurity

Table of Contents

LoginSecurity

LoginSecurity is a lightweight password authorization plugin. You can optionally set a password each time you enter the server, adding a double layer of security to your account. The password is stored inside the configuration file, nobody else except the server owner can access or modify it.

How does it work?

Features

Session login allows the user to log in right after they logged out and not have to type in their password again. (1 minute time limit of being logged out, stores IP during that time to keep everything safe)

Commands

/lac - Admin command, rmpass and reload

/register <password> - Set your password

/login <password> - Login with your password

/changepass <old> <new> - change your password

/logout - Logout

Permissions

Video

Planned

Known Bugs

Disclaimer

Links

Donate

Comments

About This Project

Categories

Members

Recent Files

Bukkit