LoginSecurity
LoginSecurity
LoginSecurity is a lightweight password authorization plugin. You can optionally set a password each time you enter the server, adding a double layer of security to your account. The password is stored inside the configuration file, nobody else except the server owner can access or modify it.
How does it work?
Install the pluign to your /plugins/ directory, then start your server.
Type /register <password>, your account is now locked with a password.
For each time you login, make sure to use /login <password>.
Features
- Register your account optional or required (change in config)
- 5 Useful commands to mangage your password
- Advanced administrative control
- Advanced documentation via wiki
- Secure password storage using BCrypt
- Secure sessions storing to improve user experience
- Customizable time-out
- Map captcha upon registration (user friendly)
- Conversion from AuthMe and xAuth (check wiki for more info)
- Premium support through AutoIn
- Automatic update with changelog overview
- Username filtering (length and characters)
- Highly detailed configuration
- Automatically updated translation manager (user-submitted)
- Prevents being kicked by orther players loging in with your name
Session login allows the user to log in right after they logged out and not have to type in their password again. (1 minute time limit of being logged out, stores IP during that time to keep everything safe)
Commands
/lac - Admin command, rmpass and reload
/register <password> - Set your password
/login <password> - Login with your password
/changepass <old> <new> - change your password
/logout - Logout
Permissions
- loginsecurity.admin - allows admin command
- loginsecurity.update - shows update notifications
Video
Thanks to ServerMiner for making this informative tutorial
Orther tutorials: German (by MineCraftler4Live)
Planned
- Add translation interface for easier language selection
- Suggestions?
Known Bugs
- Players can mount/dismount and ride on vehicles while not logged in
Disclaimer
By default, LoginSecurity will check for updates from bukkitdev every 3 hours.
This feature can be disabled by setting "update-checker" to "false"
Anyone with the permission node ls.admin will be notified of updates, and it also able to download them via /lac update.
Which again can be disabled by disabling the update-checker
This plugin utilises Hidendra's plugin metrics system, which means that the following information is collected and sent to mcstats.org:
- A unique identifier
- The server's version of Java
- Whether the server is in offline or online mode
- The plugin's version
- The server's version
- The OS version/name and architecture
- The core count for the CPU
- The number of players online
The Metrics version Opting out of this service can be done by editing plugins/Plugin Metrics/config.yml and changing opt-out to true.
Additionally, when the language setting is changed, information is retrieved from lang.lenis0012.com to aquire up to date translations.
Links
- v3.0.2 - Download (18 - 1.15)
- Source code (GitHub)
- https://github.com/lenis0012/LoginSecurity-2/wiki (Wiki)
- https://github.com/lenis0012/Translations/wiki/Contribute (Translation Contribution)
Donate
If you want to support me working on this project, please donate.
It helps me alot to keep my projects up.
Donate at the top right corner
Comments
-
lenis0012 Owner
-
View User Profile
-
Send Message
Posted Dec 9, 2012Great plugin! <3
-
View User Profile
-
Send Message
Posted Dec 6, 2012Russian translate is awful =C
-
View User Profile
-
Send Message
Posted Dec 5, 2012Hi I like this plugin too :D Your plugins are awesome!
But please update your plugin : "PvpLevels" and "Radio Player" ;)
-
View User Profile
-
Send Message
Posted Dec 4, 2012@Zilacon
works for me
@coolo1
I am probably adding it soon
@z00100100
sure, and yes it works with pex, bpermissions, permissionsBukkit and zPermissions
-
View User Profile
-
Send Message
Posted Dec 4, 2012@Zilacon
I will check it out
maybe its am error in your database, check your database and check if it actualy stored the passwords
and please dont use db4free since that will mustly time out
-
View User Profile
-
Send Message
Posted Dec 4, 2012Is the /safeip command possible? It would be VERY useful...
-
View User Profile
-
Send Message
Posted Dec 4, 2012I have the latest version of LoginSecurity and i have Required-Password: true and people are getting the message to set their password when it is already set.
I am also using a MYSQL Database for this plugin.
-
View User Profile
-
Send Message
Posted Dec 4, 2012@SwiftSwamp
no
@Rat_Cat12
well, lets have a look again (pfft)
-
View User Profile
-
Send Message
Posted Dec 4, 2012Are you able to drop blocks before you log in?
-
View User Profile
-
Send Message
Posted Dec 4, 2012could you add a perm to ignore players? and is this pex compatable?
-
View User Profile
-
Send Message
Posted Dec 4, 2012@coolo1
It isn't the same all the time! http://help.mojang.com has up to date information.
edit:@lenis0012
If you set the encryption setting to false it still encrypts passwords.
edit again: /rmpass does not remove the password.
edit again!: password-required: false just makes it so it doesn't ask players to make a password.
-
View User Profile
-
Send Message
Posted Dec 3, 2012Sessions work fine for me...
-
View User Profile
-
Send Message
Posted Dec 3, 2012@Rat_Cat12
aww your true with that
:/
ill fix it tomorrow
EDIT: Fixed in v1.6.7
-
View User Profile
-
Send Message
Posted Dec 3, 2012@lenis0012
It doesn't, it just makes the plugin go strange. Also doing /lac changePass puts the password straight into data.yml without encrypting it so the player is unable to login.
-
View User Profile
-
Send Message
Posted Dec 1, 2012@azot4o
I second this, session is not working in 1.6.6.1 !
-
View User Profile
-
Send Message
Posted Dec 1, 2012@lenis0012
Is there? Beacuse when i tested i tried to login into my account with another minecraft launcher and it logged me in and on the other mc copy i got "Logged in from another location" You could also make something to remember the password till server restart so you dont have to /login everytime. And also (dunno if it's minecraft problem and you get that error anyway) but when you disconnect from game you get connection reset on console.To many connection resets errors cause server to start lagging and then it crash.
-
View User Profile
-
Send Message
Posted Nov 30, 2012There should be a /safeip command to set the current ip as safe, like if you want a friends computer to be safe...
-
View User Profile
-
Send Message
Posted Nov 30, 2012@Rat_Cat12
password-required: false
does it
-
View User Profile
-
Send Message
Posted Nov 30, 2012@ziga808
there is blindness that will make you only see 5 blocks far, or 3 (depending on render distence)
and it already does deny joining when you are already online
unless you are not logged in yet, this will prevent people from blocking you from getting on.
so yea, i have those things
-
View User Profile
-
Send Message
Posted Nov 30, 2012Good plugin but not just ready yet,you should add a function similar to this http://dev.bukkit.org/server-mods/noaccounthack/ If player with some nick is already online, and if you try to login with the same nick you won't be able to disconnect him. And also there should be hidden location (fake location) of a player before they do login. Just my 2 cents,keep up the good work.