LoginSecurity
LoginSecurity
LoginSecurity is a lightweight password authorization plugin. You can optionally set a password each time you enter the server, adding a double layer of security to your account. The password is stored inside the configuration file, nobody else except the server owner can access or modify it.
How does it work?
Install the pluign to your /plugins/ directory, then start your server.
Type /register <password>, your account is now locked with a password.
For each time you login, make sure to use /login <password>.
Features
- Register your account optional or required (change in config)
- 5 Useful commands to mangage your password
- Advanced administrative control
- Advanced documentation via wiki
- Secure password storage using BCrypt
- Secure sessions storing to improve user experience
- Customizable time-out
- Map captcha upon registration (user friendly)
- Conversion from AuthMe and xAuth (check wiki for more info)
- Premium support through AutoIn
- Automatic update with changelog overview
- Username filtering (length and characters)
- Highly detailed configuration
- Automatically updated translation manager (user-submitted)
- Prevents being kicked by orther players loging in with your name
Session login allows the user to log in right after they logged out and not have to type in their password again. (1 minute time limit of being logged out, stores IP during that time to keep everything safe)
Commands
/lac - Admin command, rmpass and reload
/register <password> - Set your password
/login <password> - Login with your password
/changepass <old> <new> - change your password
/logout - Logout
Permissions
- loginsecurity.admin - allows admin command
- loginsecurity.update - shows update notifications
Video
Thanks to ServerMiner for making this informative tutorial
Orther tutorials: German (by MineCraftler4Live)
Planned
- Add translation interface for easier language selection
- Suggestions?
Known Bugs
- Players can mount/dismount and ride on vehicles while not logged in
Disclaimer
By default, LoginSecurity will check for updates from bukkitdev every 3 hours.
This feature can be disabled by setting "update-checker" to "false"
Anyone with the permission node ls.admin will be notified of updates, and it also able to download them via /lac update.
Which again can be disabled by disabling the update-checker
This plugin utilises Hidendra's plugin metrics system, which means that the following information is collected and sent to mcstats.org:
- A unique identifier
- The server's version of Java
- Whether the server is in offline or online mode
- The plugin's version
- The server's version
- The OS version/name and architecture
- The core count for the CPU
- The number of players online
The Metrics version Opting out of this service can be done by editing plugins/Plugin Metrics/config.yml and changing opt-out to true.
Additionally, when the language setting is changed, information is retrieved from lang.lenis0012.com to aquire up to date translations.
Links
- v3.0.2 - Download (18 - 1.15)
- Source code (GitHub)
- https://github.com/lenis0012/LoginSecurity-2/wiki (Wiki)
- https://github.com/lenis0012/Translations/wiki/Contribute (Translation Contribution)
Donate
If you want to support me working on this project, please donate.
It helps me alot to keep my projects up.
Donate at the top right corner
Comments
-
lenis0012 Owner
-
View User Profile
-
Send Message
Posted Mar 3, 2013@Ugpzt
seconded, new version does not blind/ restrict movement / accept password
-
View User Profile
-
Send Message
Posted Mar 3, 2013I kept on getting "Login timeout" with 2.0.2 inspite of the fact that I have already logged in.
-
View User Profile
-
Send Message
Posted Mar 3, 2013suggestion for even more security:
-
View User Profile
-
Send Message
Posted Mar 2, 2013is there admin commands? could you add limit registrations to IP? Players us bypasses bans and jails
-
View User Profile
-
Send Message
Posted Mar 2, 2013@lenis0012
I would pay for it 10$ for fast implementation. PM me for a deal
-
View User Profile
-
Send Message
Posted Mar 2, 2013@UltraMC
maybe something for v2.0.3
I have just uploaded v2.0.2 includig a bunch of fixes and extra checks
Wait for it to be approved please.
-
View User Profile
-
Send Message
Posted Mar 2, 2013Could you add PHPBB3 hash option? I want to brige it with my forum boards. Here's ready made handler for this in Java: http://larsho.blogspot.com/2008/02/passwords-in-phpbb-3.html
-
View User Profile
-
Send Message
Posted Mar 2, 2013@RasCas
No it should detect your enctption
be sure to not reset your config.yml before you have trasfered it over.
it detects the setting for use-md5 encryption from the config and uses that to convert
just put the new jar in the plugins folder and give it a go.
(but backups are allways handy, cause things can go wrong)
-
View User Profile
-
Send Message
Posted Mar 2, 2013As i understand an update from 1.x to 2.x is only possible if you use md5 encrypted passwords, right?
Is it possible to convert from plain text pw to md5 encrypted ones?
-
View User Profile
-
Send Message
Posted Mar 1, 2013@lenis0012
Thanks for your work! But how about the glitch if players log in mid-air they can't type? Also I'd like an option to toggle chat on or off for players that aren't logged in. Because a player may be having problems but can't chat as they aren't logged in. Thanks again :)
-
View User Profile
-
Send Message
Posted Mar 1, 2013@saramadyl
FIxed for v2.0.1
@saramadyl
I will take a look
@Exoduser
try v2.0.1
-
View User Profile
-
Send Message
Posted Feb 28, 2013Having new errors with MySQL :
http://pastebin.com/t9SbPxAJ
-
View User Profile
-
Send Message
Posted Feb 28, 2013@lenis0012 Ok, I'll switch to MySQL than... Sorry for the little mistake :P No, the error seems to happen quite randomly...
Also, I found another error that happen on player's log out : http://pastebin.com/dPEac5aa
-
View User Profile
-
Send Message
Posted Feb 28, 2013@lenis0012
I know :P but knowing my players passwords was useful sometimes XD anyway thanks for your reply. How about the glitch were if you log out in mid air, and log back, you start to jump constantly and can't type in the chat? Some players are experiencing it and it's not so good.
-
View User Profile
-
Send Message
Posted Feb 28, 2013No the error didn't came after a reload, the error always comes when the server is idle for about 2-3h and no players logging on. We aren't doing reloads because our permissions plugin (PEX) is allergic to it^^
Shall I test it if it comes up after a reload, too?
-
View User Profile
-
Send Message
Posted Feb 28, 2013@xNova13
i will fix the typo
When you dont encrypt the password its gonna be really unsafe
When a player types /register 'DROP TABLE accounts;
it removes all login data and resets all passwords
Thats not really good is it?
@saramadyl
MySQL is better but onyl if you have it on your local computer or your host provides it
When you use something like db4free its gonna be really slow
and its not SQLlite but SQLite :P
Did the error you got came after a reload?
-
View User Profile
-
Send Message
Posted Feb 28, 20133 notes: You might be aware of this already but when people log in mid-air they start constantly jumping in place and can't type or access the menu. Also when a player logs in, the word "Successfully" in the login message is misspelled. Lastly, there was a config option to not use MD5, now it's gone and all the passwords in the database file were coded to MD5. How can I change that? (if I can that is). Thank you very much :)
-
View User Profile
-
Send Message
Posted Feb 27, 2013Using LoginSecurity 2.0 , SQLlite.
I have an error in my console : http://pastebin.com/wEv0E1Pp
And just a little question, is MySQL is better than SQLlite?
-
View User Profile
-
Send Message
Posted Feb 27, 2013I'm using mySQL to store the passwords on our server. But since a while there isn't any Password request when a player is logging on, there is only a message like this on the console: [WARNING] [LoginSecurity] Could not get data from MySQL: No operations allowed after statement closed.
Does anybody know how I can fix this??
-
View User Profile
-
Send Message
Posted Feb 27, 2013Is this possible to set up with permissions like only staff and donators can use this? I don't want to annoy my users. The server is premium and not cracked.