LoginSecurity
LoginSecurity
LoginSecurity is a lightweight password authorization plugin. You can optionally set a password each time you enter the server, adding a double layer of security to your account. The password is stored inside the configuration file, nobody else except the server owner can access or modify it.
How does it work?
Install the pluign to your /plugins/ directory, then start your server.
Type /register <password>, your account is now locked with a password.
For each time you login, make sure to use /login <password>.
Features
- Register your account optional or required (change in config)
- 5 Useful commands to mangage your password
- Advanced administrative control
- Advanced documentation via wiki
- Secure password storage using BCrypt
- Secure sessions storing to improve user experience
- Customizable time-out
- Map captcha upon registration (user friendly)
- Conversion from AuthMe and xAuth (check wiki for more info)
- Premium support through AutoIn
- Automatic update with changelog overview
- Username filtering (length and characters)
- Highly detailed configuration
- Automatically updated translation manager (user-submitted)
- Prevents being kicked by orther players loging in with your name
Session login allows the user to log in right after they logged out and not have to type in their password again. (1 minute time limit of being logged out, stores IP during that time to keep everything safe)
Commands
/lac - Admin command, rmpass and reload
/register <password> - Set your password
/login <password> - Login with your password
/changepass <old> <new> - change your password
/logout - Logout
Permissions
- loginsecurity.admin - allows admin command
- loginsecurity.update - shows update notifications
Video
Thanks to ServerMiner for making this informative tutorial
Orther tutorials: German (by MineCraftler4Live)
Planned
- Add translation interface for easier language selection
- Suggestions?
Known Bugs
- Players can mount/dismount and ride on vehicles while not logged in
Disclaimer
By default, LoginSecurity will check for updates from bukkitdev every 3 hours.
This feature can be disabled by setting "update-checker" to "false"
Anyone with the permission node ls.admin will be notified of updates, and it also able to download them via /lac update.
Which again can be disabled by disabling the update-checker
This plugin utilises Hidendra's plugin metrics system, which means that the following information is collected and sent to mcstats.org:
- A unique identifier
- The server's version of Java
- Whether the server is in offline or online mode
- The plugin's version
- The server's version
- The OS version/name and architecture
- The core count for the CPU
- The number of players online
The Metrics version Opting out of this service can be done by editing plugins/Plugin Metrics/config.yml and changing opt-out to true.
Additionally, when the language setting is changed, information is retrieved from lang.lenis0012.com to aquire up to date translations.
Links
- v3.0.2 - Download (18 - 1.15)
- Source code (GitHub)
- https://github.com/lenis0012/LoginSecurity-2/wiki (Wiki)
- https://github.com/lenis0012/Translations/wiki/Contribute (Translation Contribution)
Donate
If you want to support me working on this project, please donate.
It helps me alot to keep my projects up.
Donate at the top right corner
Comments
-
lenis0012 Owner
-
View User Profile
-
Send Message
Posted Mar 20, 2014@Lord_Kaydan
ill look at it
-
View User Profile
-
Send Message
Posted Mar 20, 2014Hi Lenis002, I´m having a little problem with fake location. When players join for the first time, after register they spawn in the world spawn instead of the essentials spawn or the FirstJoinPlus spawn or in any other spawn. That means that they spawn in a 20x20 spawn area, what is annoying because they spawn outside my lobby. There is a way to fix that? Thx and sorry for my bad english.
-
View User Profile
-
Send Message
Posted Mar 20, 2014@publicg
means your worls spawn is at a strange location.
You should disable it
-
View User Profile
-
Send Message
Posted Mar 18, 2014I have this annoying bug with fake locations. When logging in, the player gets stuck in the saved location somewhere below the ground. the player starts choking/suffocating
-
View User Profile
-
Send Message
Posted Mar 16, 2014@drikagamerbr
We don't touch inventories.
-
View User Profile
-
Send Message
Posted Mar 16, 2014[BUG/ERROR] After installing the plugin, my players lost all items in the inventory. What a bad thing!
-
View User Profile
-
Send Message
Posted Mar 14, 2014Very Useful. Nice Plugin Would Love Some Expansions And Features Added.
-
View User Profile
-
Send Message
Posted Mar 13, 2014@Co0sh
Improvied username checking in v2.0.8
File under approval.
You can already get it on jenkins tho
-
View User Profile
-
Send Message
Posted Mar 12, 2014@publicg
fake locations teleports a player to world spawn until they logged in.
So that you cant spy on buildings etc.
-
View User Profile
-
Send Message
Posted Mar 10, 2014@Lenis0012
Thanks for your plugin. I have some bugfix request.
Can you prevent players from hitting other players and mobs unless they are actually logged in. Players are using it to grief my mob bosses and other players. The other players and mobs cannot hit back because the unloggedin player is immune to damage. Also prevent them from using their enderpearls and accessing their inventory. Thanks.
How does fake location work?
-
View User Profile
-
Send Message
Posted Mar 9, 2014Due to recent issues with LS i will do an update.
Please remind me if no new comment was posted wednesday by sending a PM.
-
View User Profile
-
Send Message
Posted Mar 9, 2014I have recently downloaded and installed LoginSecurity, and have had many issues. First, the /register and /login will not work. I thought if i reinstall LoginSecurity, it would start working.. but nothing is happening. So i decided to delete the plugin itself. Now my server has blindness mode stuck, and im unable to remove it? Help please.
-
View User Profile
-
Send Message
Posted Mar 5, 2014Hello, I just installed and configured Login Security, but I get a very weird message when I try to login/register. The message I get is the following: /register password -or- /login password in white characters as if it was a normal command. I don't know what to do. I deleted all mal-functioning plugins to see if that was the problem, but it still doesn't work, even if I set password-required to false. It asks me for registering if I have password-required set to true, and if I don't, it just won't let me move. What should I do? Is it maybe because I set the timeout to 1800 seconds? Anyway, even before installing the plugin, I got that, maybe because a friend has installed some plugin, but that's strange, since I can't see any other plugin except for some I have installed myself.
------And if tl;dr: I just installed and configured Login Security, but I get a very wierd message when I try to login/register. The message I get is the following: /register password -or- /login password Help, please D:-
View User Profile
-
Send Message
Posted Mar 1, 2014It says we can customize the Min and Max Characters used for a password but That option isn't in my config.yml as I see it is in the video. I'm using the 1.7.2 Version.
Suggestion: Adding a True/False feature that will keep track of the Last IP an account was logged on to. When the player rejoins if the IP matches they will not need to type their password again. Along with a Timeout option for it.
-
View User Profile
-
Send Message
Posted Feb 25, 2014"language.yml". How do I use this?
-
View User Profile
-
Send Message
Posted Feb 24, 2014@Co0sh
Yes and if u have essentials and someone login whit nick like yours but whit / infront /Nick he has your last location and /f home and /home
-
View User Profile
-
Send Message
Posted Feb 23, 2014@lenis0012
I also suggest improving username checking. Players can log in with non-english letters (e.g, ł, ó, ż, ź, ń, ś etc.), question marks (I had serious security issue with this, but that's other plugin's fault) or spaces in their usernames. You should also add an option to block nicks with less than 3 letters, it looks weird when someone logs in as "e". I would be very grateful.
EDIT: If you could also add case sensitive username checker (if I join as Co0sh, the plugin shouldn't let me in as cO0sH etc.) that would be great. It creates problems with some plugins as they see such usernames as different players.
-
View User Profile
-
Send Message
Posted Feb 20, 2014Could an e-mail recovery sistem be added? Or would that make the plugin too complex for its ideals?
-
View User Profile
-
Send Message
Posted Feb 14, 2014<<reply 2028369> Well, as you can see by this image, it is not working :'(
-
View User Profile
-
Send Message
Posted Feb 14, 2014@ziggoos
WHat does this have to do with minecraft?
@Shadow2930
Thats strange, i will look at it later this week.
@chrishillz
If 'session' use is set to true and timeout to (for example 60)
You have 60 seconds (as in example) to join back with the same ip and continue playing.
@LizardFreak7
I thought i blocked that already, oh well.
I will play around with it.
@Hemebru
If i will add bungee support it will only be on spigot forums btw.