LoginSecurity

LoginSecurity
LoginSecurity is a lightweight password authorization plugin. You can optionally set a password each time you enter the server, adding a double layer of security to your account. The password is stored inside the configuration file, nobody else except the server owner can access or modify it.
How does it work?
Install the pluign to your /plugins/ directory, then start your server.
Type /register <password>, your account is now locked with a password.
For each time you login, make sure to use /login <password>.
Features
- Register your account optional or required (change in config)
- 5 Useful commands to mangage your password
- Advanced administrative control
- Advanced documentation via wiki
- Secure password storage using BCrypt
- Secure sessions storing to improve user experience
- Customizable time-out
- Map captcha upon registration (user friendly)
- Conversion from AuthMe and xAuth (check wiki for more info)
- Premium support through AutoIn
- Automatic update with changelog overview
- Username filtering (length and characters)
- Highly detailed configuration
- Automatically updated translation manager (user-submitted)
- Prevents being kicked by orther players loging in with your name
Session login allows the user to log in right after they logged out and not have to type in their password again. (1 minute time limit of being logged out, stores IP during that time to keep everything safe)
Commands
/lac - Admin command, rmpass and reload
/register <password> - Set your password
/login <password> - Login with your password
/changepass <old> <new> - change your password
/logout - Logout
Permissions
- loginsecurity.admin - allows admin command
- loginsecurity.update - shows update notifications
Video
Thanks to ServerMiner for making this informative tutorial
Orther tutorials: German (by MineCraftler4Live)
Planned
- Add translation interface for easier language selection
- Suggestions?
Known Bugs
- Players can mount/dismount and ride on vehicles while not logged in
Disclaimer
By default, LoginSecurity will check for updates from bukkitdev every 3 hours.
This feature can be disabled by setting "update-checker" to "false"
Anyone with the permission node ls.admin will be notified of updates, and it also able to download them via /lac update.
Which again can be disabled by disabling the update-checker
This plugin utilises Hidendra's plugin metrics system, which means that the following information is collected and sent to mcstats.org:
- A unique identifier
- The server's version of Java
- Whether the server is in offline or online mode
- The plugin's version
- The server's version
- The OS version/name and architecture
- The core count for the CPU
- The number of players online
The Metrics version Opting out of this service can be done by editing plugins/Plugin Metrics/config.yml and changing opt-out to true.
Additionally, when the language setting is changed, information is retrieved from lang.lenis0012.com to aquire up to date translations.
Links
- v3.0.2 - Download (18 - 1.15)
- Source code (GitHub)
- https://github.com/lenis0012/LoginSecurity-2/wiki (Wiki)
- https://github.com/lenis0012/Translations/wiki/Contribute (Translation Contribution)
Donate
If you want to support me working on this project, please donate.
It helps me alot to keep my projects up.
Donate at the top right corner
-
View User Profile
-
Send Message
Posted Dec 31, 2012@lenis0012
Thanks Lenis!
-
View User Profile
-
Send Message
Posted Dec 30, 2012@broluigi
bug in factions
-
View User Profile
-
Send Message
Posted Dec 30, 2012Players can still use factions commands even if not logged in. Can you fix this?
-
View User Profile
-
Send Message
Posted Dec 30, 2012@MissPicket
ill add a transfer form YAML to MySQL soon
Btw for everyone i found a temp fix for the password showing issue.
in the bukkit.yml there is a feature called: log-commands
make that false ;)
-
View User Profile
-
Send Message
Posted Dec 29, 2012@lenis0012
Hi Lenis,
Nope, we're using the datafile. If there is a way to convert to mySQL, it would be great, but we can't have a period of time with the passwords unset (it happened last week because of a crash and the previous flatfile became unusable. Some players got their account hacked... etc.)
Thanks!
-
View User Profile
-
Send Message
Posted Dec 28, 2012@MissPicket
Until there is an implemented solution here a workaround that works for me:
ThisLogMustDie and ChatCensor (if someone forgets to type the / the password would otherwise be visible to any player online). Unfortunately ChatCensor has a log but you can delete it on a system basis.
-
View User Profile
-
Send Message
Posted Dec 28, 2012@MissPicket
ill check on it, using MySQL?
-
View User Profile
-
Send Message
Posted Dec 27, 2012@lenis0012
Thanks Lenis! What about the fact that /changepass doesn't work? Is that a permission?
-
View User Profile
-
Send Message
Posted Dec 27, 2012@MissPicket
ill try my best to fix it, you'll hear from me later today
-
View User Profile
-
Send Message
Posted Dec 26, 2012I think it's completely insane that whoever has console access can see the players' passwords in the logs. Some people use the same password for their minecraft than they do for more private stuff - so please realize the security breaches this opens.
I currently play on a server that uses your plugin (which otherwise works very well, by the way) and my password used to be the same than the one for my Facebook, for my Apple ID and for my Amazon account - which I know is a silly thing to do but I'm certainly not the only one. A few days later, I was given console access to help fix a plugin and suddenly saw my password all over the logs, I was HORRIFIED.
Can you imagine the possibilities it opens to not-so-honest server owners? Hacking, stealing, identity theft... etc. I think you should try and fix that issue.
Also, I told people on the server and many tried to change their password but /changepass doesn't work. Is there a command I should add to their permissions?
Thanks :)
-
View User Profile
-
Send Message
Posted Dec 24, 2012@lenis0012
Hello,
is there any way to convert from xAuth to your auth plugin and can you make some changes to your commands or alias like /setpass to /register and /rmpass to /unregister
Please, xAuth isn't updating and I need it now. - I use MySQL for xAuth.
-
View User Profile
-
Send Message
Posted Dec 23, 2012Released v1.6.8 for mc 1.4.6
the old code works with it as well but some tasksk and functiosn ahve chanegd to work better with 1.4.6
-
View User Profile
-
Send Message
Posted Dec 18, 201220,999 downloads :O
-
View User Profile
-
Send Message
Posted Dec 18, 2012@MrDiceServer
sure i will do that soon
-
View User Profile
-
Send Message
Posted Dec 16, 2012@lenis0012
Ok thanks. And also could you add complete customization to the messages, so i can change the color, and not have [LoginSecurity] Pop up when someone logs in.
-
View User Profile
-
Send Message
Posted Dec 16, 2012@MrDiceServer
ill check it
@Antonslavick2
Yeah, thats how we do
-
View User Profile
-
Send Message
Posted Dec 15, 2012Im a owner of a server and my account was being logged on to by other ppl using cracked clients now thanks to this plugin they can no longer mess around with the server and permissions thanks so much for making this please keep it up to date (10 Diamonds)
-
View User Profile
-
Send Message
Posted Dec 13, 2012@lenis0012
I have pass-req to true, and yes im using my Sql.
-
View User Profile
-
Send Message
Posted Dec 13, 2012@MrDiceServer
are you having password-required on true?
do you use MySQL?
-
View User Profile
-
Send Message
Posted Dec 9, 2012Suggestion : - Allow complete customization of the login and setpass message, and successful login and setpass. (with color) Fix : - When you have the message for login come up twice, the second message is the /setpass message. As you can see here : http://i.imgur.com/2r0Sb.png