LoginSecurity

LoginSecurity
LoginSecurity is a lightweight password authorization plugin. You can optionally set a password each time you enter the server, adding a double layer of security to your account. The password is stored inside the configuration file, nobody else except the server owner can access or modify it.
How does it work?
Install the pluign to your /plugins/ directory, then start your server.
Type /register <password>, your account is now locked with a password.
For each time you login, make sure to use /login <password>.
Features
- Register your account optional or required (change in config)
- 5 Useful commands to mangage your password
- Advanced administrative control
- Advanced documentation via wiki
- Secure password storage using BCrypt
- Secure sessions storing to improve user experience
- Customizable time-out
- Map captcha upon registration (user friendly)
- Conversion from AuthMe and xAuth (check wiki for more info)
- Premium support through AutoIn
- Automatic update with changelog overview
- Username filtering (length and characters)
- Highly detailed configuration
- Automatically updated translation manager (user-submitted)
- Prevents being kicked by orther players loging in with your name
Session login allows the user to log in right after they logged out and not have to type in their password again. (1 minute time limit of being logged out, stores IP during that time to keep everything safe)
Commands
/lac - Admin command, rmpass and reload
/register <password> - Set your password
/login <password> - Login with your password
/changepass <old> <new> - change your password
/logout - Logout
Permissions
- loginsecurity.admin - allows admin command
- loginsecurity.update - shows update notifications
Video
Thanks to ServerMiner for making this informative tutorial
Orther tutorials: German (by MineCraftler4Live)
Planned
- Add translation interface for easier language selection
- Suggestions?
Known Bugs
- Players can mount/dismount and ride on vehicles while not logged in
Disclaimer
By default, LoginSecurity will check for updates from bukkitdev every 3 hours.
This feature can be disabled by setting "update-checker" to "false"
Anyone with the permission node ls.admin will be notified of updates, and it also able to download them via /lac update.
Which again can be disabled by disabling the update-checker
This plugin utilises Hidendra's plugin metrics system, which means that the following information is collected and sent to mcstats.org:
- A unique identifier
- The server's version of Java
- Whether the server is in offline or online mode
- The plugin's version
- The server's version
- The OS version/name and architecture
- The core count for the CPU
- The number of players online
The Metrics version Opting out of this service can be done by editing plugins/Plugin Metrics/config.yml and changing opt-out to true.
Additionally, when the language setting is changed, information is retrieved from lang.lenis0012.com to aquire up to date translations.
Links
- v3.0.2 - Download (18 - 1.15)
- Source code (GitHub)
- https://github.com/lenis0012/LoginSecurity-2/wiki (Wiki)
- https://github.com/lenis0012/Translations/wiki/Contribute (Translation Contribution)
Donate
If you want to support me working on this project, please donate.
It helps me alot to keep my projects up.
Donate at the top right corner
-
View User Profile
-
Send Message
Posted Jun 22, 2013I'm starting to make my first server, i dont know much about all the things in the configuration, but want to know if is there a way to change the messages, for example when you send /register say something like "/register [username]" i want to appear "/register senha" (im brazilian)
-
View User Profile
-
Send Message
Posted Jun 22, 2013btw how do i open users ?
-
View User Profile
-
Send Message
Posted Jun 22, 2013u should put in a ADMIN command so u can change a password if they have forgot it ..
-
View User Profile
-
Send Message
Posted Jun 21, 2013@Fringillus
Oops, yes.
My mistake
@Fringillus
You can remove it using /lac rmpass <user>
@StnFlu
No problem
@GreekGamer99
Check your config, i bet your password-required is on false
@yanniclord
It blocks it as long as you aren't logged in
-
View User Profile
-
Send Message
Posted Jun 21, 2013It removes or Disables PEX. Since when i installed it, it disabled PEX. Help
-
View User Profile
-
Send Message
Posted Jun 21, 2013<<reply 1why doesn't say any massage to register or cant move becuase your are not register ?
-
View User Profile
-
Send Message
Posted Jun 20, 2013@lenis0012 thanks so much amazing plugin
-
View User Profile
-
Send Message
Posted Jun 20, 2013Also, how do you change a user's password if they forgot it?
-
View User Profile
-
Send Message
Posted Jun 20, 2013When you write /login ingame, it says "Usage: /login [username]"
Username? It says password here. And it's confusing players on my server.
-
View User Profile
-
Send Message
Posted Jun 16, 2013@derpasaurs
try dev builds
-
View User Profile
-
Send Message
Posted Jun 16, 2013there is also an exception in console my server.log is below in the coments
-
View User Profile
-
Send Message
Posted Jun 16, 2013basically about one minute after someone logs into my server the plugin logs them out. on their screen it says "login timeout”.
-
View User Profile
-
Send Message
Posted Jun 15, 2013@SergioYuste
@StnFlu
Ok i put this in the new dev build.
You can use a 'fake location' wich willl tp someone to the worl spawn until they log in.
Remeber that this si a dev build and i have not tested it yet.
Get it on our jenkins
-
View User Profile
-
Send Message
Posted Jun 15, 2013@SergioYuste
Working on it
@StnFlu
Ill add an optionb for it
@derpasaurs
II dont get you..
-
View User Profile
-
Send Message
Posted Jun 15, 2013Suggestion - a hub for when they log in that after logging in takes them back to there previous point so people cant get co-ords for bases
-
View User Profile
-
Send Message
Posted Jun 15, 2013ERROR, PLS give me a solution? :(
Pastebin of error
-
View User Profile
-
Send Message
Posted Jun 15, 2013BUG, BUG, BUG! I FOUND A BUG!
if you are living on the west coast and someone on the east coast logs into your server after about 1 minute after it logs him out. It says "login timeout" on his screen.
here is part of my server.log: http:\\www.pastebin.com/0knnikrj
-
View User Profile
-
Send Message
Posted Jun 14, 2013I just uploaded LoginSecurity v2.0.4 for CB 1.5.2 R1.0
Lets wait until it is approved
-
View User Profile
-
Send Message
Posted Jun 13, 2013@xNova13
I will add / and \ to the username filter
@Perceval7
Yes, that was actualy my motivation for this plugin.
My server got alot of session stealer attacks at the time it still worked.
And i needed a quick fix for that.
But of course all the login plugins at that time had passwords required.
And i just wanted it for my admins.
I hope you will be happy with this plugin.
If you have any suggestion fell free to ask me to add them.
-
View User Profile
-
Send Message
Posted Jun 12, 2013Bug: when you add a / or a \ before the username, it counts as a new player and it prompts them to register again. Such as, a player's name is "Player", if someone logs in as "/Player" it'll tell them to register again, and they can have access to that player's account. This is critical, so please try to sort it out ASAP. And I can keep adding / or \ before the username and it'll still prompt me to re-register!