LoginSecurity
LoginSecurity
LoginSecurity is a lightweight password authorization plugin. You can optionally set a password each time you enter the server, adding a double layer of security to your account. The password is stored inside the configuration file, nobody else except the server owner can access or modify it.
How does it work?
Install the pluign to your /plugins/ directory, then start your server.
Type /register <password>, your account is now locked with a password.
For each time you login, make sure to use /login <password>.
Features
- Register your account optional or required (change in config)
- 5 Useful commands to mangage your password
- Advanced administrative control
- Advanced documentation via wiki
- Secure password storage using BCrypt
- Secure sessions storing to improve user experience
- Customizable time-out
- Map captcha upon registration (user friendly)
- Conversion from AuthMe and xAuth (check wiki for more info)
- Premium support through AutoIn
- Automatic update with changelog overview
- Username filtering (length and characters)
- Highly detailed configuration
- Automatically updated translation manager (user-submitted)
- Prevents being kicked by orther players loging in with your name
Session login allows the user to log in right after they logged out and not have to type in their password again. (1 minute time limit of being logged out, stores IP during that time to keep everything safe)
Commands
/lac - Admin command, rmpass and reload
/register <password> - Set your password
/login <password> - Login with your password
/changepass <old> <new> - change your password
/logout - Logout
Permissions
- loginsecurity.admin - allows admin command
- loginsecurity.update - shows update notifications
Video
Thanks to ServerMiner for making this informative tutorial
Orther tutorials: German (by MineCraftler4Live)
Planned
- Add translation interface for easier language selection
- Suggestions?
Known Bugs
- Players can mount/dismount and ride on vehicles while not logged in
Disclaimer
By default, LoginSecurity will check for updates from bukkitdev every 3 hours.
This feature can be disabled by setting "update-checker" to "false"
Anyone with the permission node ls.admin will be notified of updates, and it also able to download them via /lac update.
Which again can be disabled by disabling the update-checker
This plugin utilises Hidendra's plugin metrics system, which means that the following information is collected and sent to mcstats.org:
- A unique identifier
- The server's version of Java
- Whether the server is in offline or online mode
- The plugin's version
- The server's version
- The OS version/name and architecture
- The core count for the CPU
- The number of players online
The Metrics version Opting out of this service can be done by editing plugins/Plugin Metrics/config.yml and changing opt-out to true.
Additionally, when the language setting is changed, information is retrieved from lang.lenis0012.com to aquire up to date translations.
Links
- v3.0.2 - Download (18 - 1.15)
- Source code (GitHub)
- https://github.com/lenis0012/LoginSecurity-2/wiki (Wiki)
- https://github.com/lenis0012/Translations/wiki/Contribute (Translation Contribution)
Donate
If you want to support me working on this project, please donate.
It helps me alot to keep my projects up.
Donate at the top right corner
Comments
-
lenis0012 Owner
-
View User Profile
-
Send Message
Posted Sep 11, 2013So I'm having an issue where a player forgot their password, and trying to remove it with /lac rmpass <username> doesn't work >_< - At first it was just because I had capitalized a couple letters in the username, but then when I did get it reset, he still couldn't get on. Is there a default password?
I can't seem to find any way to remove the password/user from the plugin since the player file is all secure etc lol.
Also, when I removed his player info from the main server folder, it now insta-boots him with reason unknown.
-
View User Profile
-
Send Message
Posted Sep 11, 2013@youri12
I know what you mean, I've seen that issue with someone else's server but it doesn't happen on mine :) (I think its because i've enabled flying, not sure but give it a try). Basically happens when the player doesn't have a block to stand on - they fall - but since they're not allowed to move it brings them back to the login cords, repeat. The main issue is that when they get moved, if they have chat open, it closes it, ergo can't even login to let the player fall.
A known work around is to tp them to solid ground.
-
View User Profile
-
Send Message
Posted Sep 11, 2013Could you add a permission for use of the registery. cause i only want to make my mods use this for instance.
-
View User Profile
-
Send Message
Posted Sep 11, 2013Just a tiny bug I have found. (http://img62.imageshack.us/img62/2593/ly4t.png) When typing /register or /rmpass it says <username> not <password>
-
View User Profile
-
Send Message
Posted Sep 10, 2013@erik1988
keep the password-required on false.
and tell yoiur admins to register.
@youri12
What do you mean?
@CanadianSnow
Ill put it in the known issues for now.
And i will fix it later
-
View User Profile
-
Send Message
Posted Sep 9, 2013players can't login sometimes ans they are jumping and they cant open chat about it will be closed again and pressing esc it the same please fix!
-
View User Profile
-
Send Message
Posted Sep 9, 2013Translations please? Or the posibility to edit de messages :D
-
View User Profile
-
Send Message
Posted Sep 8, 2013While you can't really do much, people CAN move around if they logged out while on a horse. They can also mount/dismount horses if in range. Please update/fix or AT LEAST put it in your known issues. Otherwise awesome plugin - thx
-
View User Profile
-
Send Message
Posted Sep 8, 2013Is it possible to use this just for admins? So that only admins have to type in passwords not the regular players. If someone manage to hack into an admin account they can do big damages with WE, so I want to add an extra security to this.
-
View User Profile
-
Send Message
Posted Sep 7, 2013Thanks for this!
-
View User Profile
-
Send Message
Posted Sep 7, 2013Is there anyway you can add a permission so only certain groups need to register
-
View User Profile
-
Send Message
Posted Sep 6, 2013Thanks for this and making it so simple. :)
-
View User Profile
-
Send Message
Posted Sep 5, 2013@FabioZumbi12
I can add that later in the config as an optional feature
@stretch_ca
@tsakiman
Check config
-
View User Profile
-
Send Message
Posted Sep 3, 2013yea I was thinking when u login you got to spawn and once u enter your password u go to ur last place
-
View User Profile
-
Send Message
Posted Sep 3, 2013Can you put a standard login spawn?
-
View User Profile
-
Send Message
Posted Sep 2, 2013everyone keeps getting kicked cause there flying anyway to fix this ive gotta keep an eye on everyone on join and if it looks like their floating I gotta do /tphere player before they get kicked.. also some users have to copy /login password and paste it really quick before they get kicked or the chat window goes away..
-
View User Profile
-
Send Message
Posted Aug 31, 2013I need help, i can't log in, I use this plugin in my server, but when I enter, it doesn't even appear to log, i get blindness, but i can walk, this doesn't happen whit any other people, just whim my character (allansisi), is not a problem whit my internet (i can enter in any other server) and it isn't my server, because it doesn't happen to everyone. How do I fix it?
-
View User Profile
-
Send Message
Posted Aug 28, 2013Can you implement email registration with password?? I ill go use the same login info into my forum from my server, and need email and password... Ex.: /register <pass> <email>
Thanks.
edit Can be any email(fake too) but i need only diferent emails to joomla accept new registers-
View User Profile
-
Send Message
Posted Aug 27, 2013Permission based option of being exempt from logging in - like the fake user Buildcraft for example! :)
-
View User Profile
-
Send Message
Posted Aug 26, 2013is there any way of preventing players have 1000000+ accounts?on a cracked server? like account limit only to 1? and exeption of admins?