LoginSecurity

LoginSecurity
LoginSecurity is a lightweight password authorization plugin. You can optionally set a password each time you enter the server, adding a double layer of security to your account. The password is stored inside the configuration file, nobody else except the server owner can access or modify it.
How does it work?
Install the pluign to your /plugins/ directory, then start your server.
Type /register <password>, your account is now locked with a password.
For each time you login, make sure to use /login <password>.
Features
- Register your account optional or required (change in config)
- 5 Useful commands to mangage your password
- Advanced administrative control
- Advanced documentation via wiki
- Secure password storage using BCrypt
- Secure sessions storing to improve user experience
- Customizable time-out
- Map captcha upon registration (user friendly)
- Conversion from AuthMe and xAuth (check wiki for more info)
- Premium support through AutoIn
- Automatic update with changelog overview
- Username filtering (length and characters)
- Highly detailed configuration
- Automatically updated translation manager (user-submitted)
- Prevents being kicked by orther players loging in with your name
Session login allows the user to log in right after they logged out and not have to type in their password again. (1 minute time limit of being logged out, stores IP during that time to keep everything safe)
Commands
/lac - Admin command, rmpass and reload
/register <password> - Set your password
/login <password> - Login with your password
/changepass <old> <new> - change your password
/logout - Logout
Permissions
- loginsecurity.admin - allows admin command
- loginsecurity.update - shows update notifications
Video
Thanks to ServerMiner for making this informative tutorial
Orther tutorials: German (by MineCraftler4Live)
Planned
- Add translation interface for easier language selection
- Suggestions?
Known Bugs
- Players can mount/dismount and ride on vehicles while not logged in
Disclaimer
By default, LoginSecurity will check for updates from bukkitdev every 3 hours.
This feature can be disabled by setting "update-checker" to "false"
Anyone with the permission node ls.admin will be notified of updates, and it also able to download them via /lac update.
Which again can be disabled by disabling the update-checker
This plugin utilises Hidendra's plugin metrics system, which means that the following information is collected and sent to mcstats.org:
- A unique identifier
- The server's version of Java
- Whether the server is in offline or online mode
- The plugin's version
- The server's version
- The OS version/name and architecture
- The core count for the CPU
- The number of players online
The Metrics version Opting out of this service can be done by editing plugins/Plugin Metrics/config.yml and changing opt-out to true.
Additionally, when the language setting is changed, information is retrieved from lang.lenis0012.com to aquire up to date translations.
Links
- v3.0.2 - Download (18 - 1.15)
- Source code (GitHub)
- https://github.com/lenis0012/LoginSecurity-2/wiki (Wiki)
- https://github.com/lenis0012/Translations/wiki/Contribute (Translation Contribution)
Donate
If you want to support me working on this project, please donate.
It helps me alot to keep my projects up.
Donate at the top right corner
-
View User Profile
-
Send Message
Posted Jul 6, 2013Does the plugin make player invincible before logging in? A player on my server said that he'd nearly drowned when he was entering his password, so I don't think it does. If so, this would be a good option to have. I know players can simply go to a safe place, then log off, but I'd like to make players invincible before loging in with their password (if it doesn't already happen). If it's already there, then sorry for bothering you about it.
By the way, I love the plugin. It works really well and is really simple to configure. I had it configured and running in less then 3 minutes. The simplicity of it makes it a really good plugin for small servers like mine.
-
View User Profile
-
Send Message
Posted Jul 5, 2013@lenis0012
Could you by any chance tell me how to fix this? I'd greatly like to use LoginSecurity.
-
View User Profile
-
Send Message
Posted Jul 5, 2013@SkyTech21
It means your PlayerCommandPreprocessEvent doesn't work on BukkitForge
-
View User Profile
-
Send Message
Posted Jul 4, 2013is there also a possible way to teleport the players to spawn when they log in???
-
View User Profile
-
Send Message
Posted Jul 3, 2013I was really excited to find this plugin... as none of the other Auth plugins work with Pixelmon/Forgebukkit but another server owner over there suggested this to me...
Still this doesn't seem to work for me and has the same problem as Authme for me... is it me?
Even though I have it required for people to make a password, I can still use /stop pos1 pos2 lava 99999 all I want without logging in. That's a BIG problem and I don't understand why it doesn't work. There are no errors :/
Can you help me?
-
View User Profile
-
Send Message
Posted Jul 2, 2013@JamiePhonic
ye thats my fault.
use /lac rmpass <user>
-
View User Profile
-
Send Message
Posted Jul 2, 2013i just got this plugin to use for a project and i noticed that /register and /rmpass gives an syntax error saying that the usage is meant to be /register <username> and /rmpass <username> if you don't supply an argument
aside from that, could you add the option to remove another user's password ingame with something like /resetpass <username> <password>
-
View User Profile
-
Send Message
Posted Jul 1, 2013I need help, I got a Player on my Server who forgot his password....we can't delete his Account....What ever, is there a why to change his password or delete his password from my Account? /lac does not work
-
View User Profile
-
Send Message
Posted Jul 1, 2013Is there any way to get a full password list for my servfer?
-
View User Profile
-
Send Message
Posted Dec 1, 2016passwords are stored in an encrypted form for security reasons.
-
View User Profile
-
Send Message
Posted Jun 30, 2013I took the plugin out, not because I didn't like it (I love it). My server is just no longer an offline-mode server. However, the blindness remains on the server, at first I made sure that I had deleted the plugin and I have deleted both the .jar and the folder but the blindness still remains. I am really confused because I have now checked everyone of my plugins for a blindness effect. I am not sure what this could be.
-
View User Profile
-
Send Message
Posted Jun 30, 2013Can you add a auto-temp ban if someone types there password wrong 3 times?
-
View User Profile
-
Send Message
Posted Jun 30, 2013@Gibstick
Those are the small things you forget when you code at 5AM
I merged the pull request.
Will be on jenkins
-
View User Profile
-
Send Message
Posted Jun 29, 2013Great plugin!
Unfortunately, I get periodic warnings in my server log about a java.util.ConcurrentModificationException. http:pastie.org/pastes/8095365/text?key=1e10lazfbtedhghdhmgew. Despite these errors, the plugin still works and it doesn't throw additional errors upon login/session restore or anything else. If it matters, the passwords are being hashed with SHA-512 and stored with SQLite.
Also, one quick request: filter the /login and /register commands from the server log/console, since this shows passwords in plain text.
Edit: my friend submitted a pull request as a fix. Preliminary testing seems to show that it works.
-
View User Profile
-
Send Message
Posted Jun 29, 2013@PAMCFactions
Try typing the username in full lowercase
-
View User Profile
-
Send Message
Posted Jun 28, 2013Hey, I want to do something on my server website that you can be sended your password if you forgot it with your email. Could you tell me how I can see the passwords?
-
View User Profile
-
Send Message
Posted Jun 27, 2013Hi.
I had two problems, other than that I love the plugin. I need to change someone's password to something else. Also, I need to view people's passwords. One other problem that I had was when I go to do /lac rmpass <user> for some people, it says "Invalid Username". They have joined the server before but they forgot their own password.
-
View User Profile
-
Send Message
Posted Jun 23, 2013So can we change the messages?
-
View User Profile
-
Send Message
Posted Jun 22, 2013Any chance for XenForo support? You are can use AuthDB sources for add support ;)
-
View User Profile
-
Send Message
Posted Jun 22, 2013@gsponda
This is currently not possible.
I had this in v1.x and im workign hard on getting the language system back.
@blomman2
use /lac