LoginSecurity

LoginSecurity
LoginSecurity is a lightweight password authorization plugin. You can optionally set a password each time you enter the server, adding a double layer of security to your account. The password is stored inside the configuration file, nobody else except the server owner can access or modify it.
How does it work?
Install the pluign to your /plugins/ directory, then start your server.
Type /register <password>, your account is now locked with a password.
For each time you login, make sure to use /login <password>.
Features
- Register your account optional or required (change in config)
- 5 Useful commands to mangage your password
- Advanced administrative control
- Advanced documentation via wiki
- Secure password storage using BCrypt
- Secure sessions storing to improve user experience
- Customizable time-out
- Map captcha upon registration (user friendly)
- Conversion from AuthMe and xAuth (check wiki for more info)
- Premium support through AutoIn
- Automatic update with changelog overview
- Username filtering (length and characters)
- Highly detailed configuration
- Automatically updated translation manager (user-submitted)
- Prevents being kicked by orther players loging in with your name
Session login allows the user to log in right after they logged out and not have to type in their password again. (1 minute time limit of being logged out, stores IP during that time to keep everything safe)
Commands
/lac - Admin command, rmpass and reload
/register <password> - Set your password
/login <password> - Login with your password
/changepass <old> <new> - change your password
/logout - Logout
Permissions
- loginsecurity.admin - allows admin command
- loginsecurity.update - shows update notifications
Video
Thanks to ServerMiner for making this informative tutorial
Orther tutorials: German (by MineCraftler4Live)
Planned
- Add translation interface for easier language selection
- Suggestions?
Known Bugs
- Players can mount/dismount and ride on vehicles while not logged in
Disclaimer
By default, LoginSecurity will check for updates from bukkitdev every 3 hours.
This feature can be disabled by setting "update-checker" to "false"
Anyone with the permission node ls.admin will be notified of updates, and it also able to download them via /lac update.
Which again can be disabled by disabling the update-checker
This plugin utilises Hidendra's plugin metrics system, which means that the following information is collected and sent to mcstats.org:
- A unique identifier
- The server's version of Java
- Whether the server is in offline or online mode
- The plugin's version
- The server's version
- The OS version/name and architecture
- The core count for the CPU
- The number of players online
The Metrics version Opting out of this service can be done by editing plugins/Plugin Metrics/config.yml and changing opt-out to true.
Additionally, when the language setting is changed, information is retrieved from lang.lenis0012.com to aquire up to date translations.
Links
- v3.0.2 - Download (18 - 1.15)
- Source code (GitHub)
- https://github.com/lenis0012/LoginSecurity-2/wiki (Wiki)
- https://github.com/lenis0012/Translations/wiki/Contribute (Translation Contribution)
Donate
If you want to support me working on this project, please donate.
It helps me alot to keep my projects up.
Donate at the top right corner
-
View User Profile
-
Send Message
Posted Mar 9, 2013You should have it to where each person can only login on one ip address, so hackers cant use proxies. and the owner can easily remove the ip to let the person back on if their ip just changes for real.
-
View User Profile
-
Send Message
Posted Mar 9, 2013Can I convert AuthMe mysql data, (not hashed) to xAuth. I wan't to start using this plugin.
-
View User Profile
-
Send Message
Posted Mar 8, 2013@Sickagp
use IPsecurity if you want to protect your OPS
-
View User Profile
-
Send Message
Posted Mar 7, 2013@xNova13
Hm, maybe this is a good hint. I also tested with OP Account. The non Op Accounts used the same ip.
-
View User Profile
-
Send Message
Posted Mar 7, 2013@lenis0012
Hi, I have a player who has forgotten their password. What should I do about?
-
View User Profile
-
Send Message
Posted Mar 6, 2013Critical bug. When a player is OP, they can move and play normally without the need to login :O Even though I set password required in the config to true!
Edit: Went back to v2.0.1 as a temp solution :S
-
View User Profile
-
Send Message
Posted Mar 6, 2013@lenis0012
Yepp, they may do, what they want until login timeout kicks them. Regardeless if its a registered player not logged in or a new one.
-
View User Profile
-
Send Message
Posted Mar 5, 2013@RasCas
Thats really weird
I will check on this later today
When a player joines who is registered the blindness goes away when they walk?
-
View User Profile
-
Send Message
Posted Mar 5, 2013The only thing working for me is login timeout, i tried clean and update install. The good news passwords are converted correctly. But that's it. Blindness goes away when the player moves, he can drop, build and move freely until login timeout kicks him. Before you ask, Yes i set password required to true but this makes no difference to false. ;-)
Tested with latest release and Jenkins 2.02
-
View User Profile
-
Send Message
Posted Mar 4, 2013@lenis0012
Yes, I've set it to force users to register. Players were able to not login and use any command until they were kicked for "Login Timed Out" (or something like that) I've changed to another plugin in the meantime but I'd rather be using this one.
-
View User Profile
-
Send Message
Posted Mar 4, 2013@NuggetFace
Can you explain what you did?
By default it is not required to register on the server.
Its optionalt
Wich you can change in the config
-
View User Profile
-
Send Message
Posted Mar 4, 2013@NuggetFace
Not just you, same here.
-
View User Profile
-
Send Message
Posted Mar 4, 2013Hi i have this issue
-
View User Profile
-
Send Message
Posted Mar 4, 2013@lenis0012
It still isn't working for me, it doesn't restrict movements and players can just move to stop the blindness. Might just be me though.
-
View User Profile
-
Send Message
Posted Mar 4, 2013@pkminer
should hapend automaticly on startup
@Vuilnisvervuilen
I can fix this ;)
@Ugpzt
Use jsnkins dev build
Uploading new release to BukkitDev soon
-
View User Profile
-
Send Message
Posted Mar 4, 2013How to import my previous database from the older loginsecurity to this one?
-
View User Profile
-
Send Message
Posted Mar 4, 2013I've found a bug, or if you jump into the water and swims server restart or reload, you can reload or restart after not login. And this can Aleen can be avoided if you have the players to teleport you, maybe you can fix this
-
View User Profile
-
Send Message
Posted Mar 4, 2013I've found a bug, or if you jump into the water and swims server restart or reload, you can reload or restart after not login. And this can Aleen can be avoided if you have the players to teleport you, maybe you can fix this
Thanks
-
View User Profile
-
Send Message
Posted Mar 4, 2013@PintSki
third this, does not restrict anything at all. There is no difference if you are logged in or out
-
View User Profile
-
Send Message
Posted Mar 4, 2013Hi, I have a player who has forgotten their password. How do i rectify this?