LoginSecurity

LoginSecurity
LoginSecurity is a lightweight password authorization plugin. You can optionally set a password each time you enter the server, adding a double layer of security to your account. The password is stored inside the configuration file, nobody else except the server owner can access or modify it.
How does it work?
Install the pluign to your /plugins/ directory, then start your server.
Type /register <password>, your account is now locked with a password.
For each time you login, make sure to use /login <password>.
Features
- Register your account optional or required (change in config)
- 5 Useful commands to mangage your password
- Advanced administrative control
- Advanced documentation via wiki
- Secure password storage using BCrypt
- Secure sessions storing to improve user experience
- Customizable time-out
- Map captcha upon registration (user friendly)
- Conversion from AuthMe and xAuth (check wiki for more info)
- Premium support through AutoIn
- Automatic update with changelog overview
- Username filtering (length and characters)
- Highly detailed configuration
- Automatically updated translation manager (user-submitted)
- Prevents being kicked by orther players loging in with your name
Session login allows the user to log in right after they logged out and not have to type in their password again. (1 minute time limit of being logged out, stores IP during that time to keep everything safe)
Commands
/lac - Admin command, rmpass and reload
/register <password> - Set your password
/login <password> - Login with your password
/changepass <old> <new> - change your password
/logout - Logout
Permissions
- loginsecurity.admin - allows admin command
- loginsecurity.update - shows update notifications
Video
Thanks to ServerMiner for making this informative tutorial
Orther tutorials: German (by MineCraftler4Live)
Planned
- Add translation interface for easier language selection
- Suggestions?
Known Bugs
- Players can mount/dismount and ride on vehicles while not logged in
Disclaimer
By default, LoginSecurity will check for updates from bukkitdev every 3 hours.
This feature can be disabled by setting "update-checker" to "false"
Anyone with the permission node ls.admin will be notified of updates, and it also able to download them via /lac update.
Which again can be disabled by disabling the update-checker
This plugin utilises Hidendra's plugin metrics system, which means that the following information is collected and sent to mcstats.org:
- A unique identifier
- The server's version of Java
- Whether the server is in offline or online mode
- The plugin's version
- The server's version
- The OS version/name and architecture
- The core count for the CPU
- The number of players online
The Metrics version Opting out of this service can be done by editing plugins/Plugin Metrics/config.yml and changing opt-out to true.
Additionally, when the language setting is changed, information is retrieved from lang.lenis0012.com to aquire up to date translations.
Links
- v3.0.2 - Download (18 - 1.15)
- Source code (GitHub)
- https://github.com/lenis0012/LoginSecurity-2/wiki (Wiki)
- https://github.com/lenis0012/Translations/wiki/Contribute (Translation Contribution)
Donate
If you want to support me working on this project, please donate.
It helps me alot to keep my projects up.
Donate at the top right corner
-
View User Profile
-
Send Message
Posted Jan 9, 2014@Vash0
You should never use the same DB for your website and server, unless they are on the same host and you are forced to only use 1.
-
View User Profile
-
Send Message
Posted Jan 8, 2014Hi, nice job with this plugin, I just have a problem. I want change the name table he use (i try change the prefix but.. nothing happen he create with name just "users"). i need change it because i have my web on DB with this name and is causing some issues. I wait for anwers. Thanks :)
-
View User Profile
-
Send Message
Posted Jan 3, 2014@DarkNight5047
It repeats it every 10 seconds.
@Thepom360
Sure, when i finsihes some stuff i have to do first
-
View User Profile
-
Send Message
Posted Jan 3, 2014@xTAZZ3RZz
ARe you using the latest build on bukkitdev or the latest dev build?
-
View User Profile
-
Send Message
Posted Jan 1, 2014MAJOR problem i am registered as owner- xTAZZ3RZz someone comes online as xTazz3rzz and is allowed to register due to lower case ..... ????????????????????????????????????????????/ THEN he has all my permissions. =/
-
View User Profile
-
Send Message
Posted Dec 30, 2013Hey, i was just wondering, i dont wont the lock on all my players accounts, i only want it on mine, just in case someone hacks into my account Is that possible?
-
View User Profile
-
Send Message
Posted Dec 29, 2013@lenis0012
that would be awesome!! can it be done?
-
View User Profile
-
Send Message
Posted Dec 29, 2013Hi ! I suggest you to repeat the sentence "Please login using /login <password>" multiple times because some players don't see and don't know what to do. Thanks :)
-
View User Profile
-
Send Message
Posted Dec 28, 2013@Thepom360
They can't
It would actualy be a good idea to have a command to add an email.
And send an email when you looose your password.
@DodgeThemAll
Allright, i will add support for it
-
View User Profile
-
Send Message
Posted Dec 28, 2013How can users recover their passwords?
-
View User Profile
-
Send Message
Posted Dec 26, 2013I would really appreciate a force register for permissions, such as - ls.force
It would really set it apart from other plugins like Crazy Login (which I could not get to do this)
Thanks, stardust0123
-
View User Profile
-
Send Message
Posted Dec 26, 2013@AdGameRr
This problem is minor, you can ignore it
-
View User Profile
-
Send Message
Posted Dec 25, 2013Hey! I have a problem, the logs: [LoginSecurity] Could not read from auth list! Thanks!
-
View User Profile
-
Send Message
Posted Dec 14, 2013I love it :)
-
View User Profile
-
Send Message
Posted Dec 11, 2013@lenis0012
Oh alright, that's a relief. It seems a little exaggerated to take it down just for that.
Btw, thank you for making this plugin, it's a great help.
-
View User Profile
-
Send Message
Posted Dec 9, 2013@azinfiro
It had to do with sponsored image links.
Nothing related to the plugin itself.
-
View User Profile
-
Send Message
Posted Dec 8, 2013I'm curious now, what's all this about the plugin being blocked and awaiting approval? Are there security concerns about the plugin?
-
View User Profile
-
Send Message
Posted Dec 3, 2013@lenis0012
People have /name, basically hack everyones account with /name as in your name in game is lenis0012, someone can login with /lenis0012 register etc.
-
View User Profile
-
Send Message
Posted Dec 2, 2013@Ze0KOn
@sjwebster92
Will do.
@InsomniaCraft
im not sure on this, maybe
-
View User Profile
-
Send Message
Posted Dec 2, 2013Suggestion:
Force register per permission.
Say i want my admins to have passwords but i dont require my users to..
something like:
login.require
cheers Sam