LoginSecurity

LoginSecurity
LoginSecurity is a lightweight password authorization plugin. You can optionally set a password each time you enter the server, adding a double layer of security to your account. The password is stored inside the configuration file, nobody else except the server owner can access or modify it.
How does it work?
Install the pluign to your /plugins/ directory, then start your server.
Type /register <password>, your account is now locked with a password.
For each time you login, make sure to use /login <password>.
Features
- Register your account optional or required (change in config)
- 5 Useful commands to mangage your password
- Advanced administrative control
- Advanced documentation via wiki
- Secure password storage using BCrypt
- Secure sessions storing to improve user experience
- Customizable time-out
- Map captcha upon registration (user friendly)
- Conversion from AuthMe and xAuth (check wiki for more info)
- Premium support through AutoIn
- Automatic update with changelog overview
- Username filtering (length and characters)
- Highly detailed configuration
- Automatically updated translation manager (user-submitted)
- Prevents being kicked by orther players loging in with your name
Session login allows the user to log in right after they logged out and not have to type in their password again. (1 minute time limit of being logged out, stores IP during that time to keep everything safe)
Commands
/lac - Admin command, rmpass and reload
/register <password> - Set your password
/login <password> - Login with your password
/changepass <old> <new> - change your password
/logout - Logout
Permissions
- loginsecurity.admin - allows admin command
- loginsecurity.update - shows update notifications
Video
Thanks to ServerMiner for making this informative tutorial
Orther tutorials: German (by MineCraftler4Live)
Planned
- Add translation interface for easier language selection
- Suggestions?
Known Bugs
- Players can mount/dismount and ride on vehicles while not logged in
Disclaimer
By default, LoginSecurity will check for updates from bukkitdev every 3 hours.
This feature can be disabled by setting "update-checker" to "false"
Anyone with the permission node ls.admin will be notified of updates, and it also able to download them via /lac update.
Which again can be disabled by disabling the update-checker
This plugin utilises Hidendra's plugin metrics system, which means that the following information is collected and sent to mcstats.org:
- A unique identifier
- The server's version of Java
- Whether the server is in offline or online mode
- The plugin's version
- The server's version
- The OS version/name and architecture
- The core count for the CPU
- The number of players online
The Metrics version Opting out of this service can be done by editing plugins/Plugin Metrics/config.yml and changing opt-out to true.
Additionally, when the language setting is changed, information is retrieved from lang.lenis0012.com to aquire up to date translations.
Links
- v3.0.2 - Download (18 - 1.15)
- Source code (GitHub)
- https://github.com/lenis0012/LoginSecurity-2/wiki (Wiki)
- https://github.com/lenis0012/Translations/wiki/Contribute (Translation Contribution)
Donate
If you want to support me working on this project, please donate.
It helps me alot to keep my projects up.
Donate at the top right corner
-
View User Profile
-
Send Message
Posted May 3, 2014I made a video tutorial of the plugin in Spanish I hope you can put it on page Thank you!
https://www.youtube.com/watch?v=pjz5ZmbGIJI&feature=youtu.be
-
View User Profile
-
Send Message
Posted May 2, 2014@Z609
yes and no.
But for bungee servers.
I recomment to install LoginSecurity on just your hub.
And OnlyProxyJoin on your other servers.
So that people have to join through the hbu where they have to log in once.
-
View User Profile
-
Send Message
Posted May 1, 2014Is this compatible with BungeeCord?
-
View User Profile
-
Send Message
Posted Apr 29, 2014@MadFactory
Ok. the ip field is the last ip the suer joined with.
This is used in the session to make sure the player that logs back on is the same as before instead of someone else logging on with that name.
i think encrypting though java works different then through java.
That why i added support for PHPBB3 encryption.
Look at this post:
https://www.phpbb.com/community/viewtopic.php?f=71&t=914205&start=0&st=0&sk=t&sd=a
-
View User Profile
-
Send Message
Posted Apr 26, 2014Is there a node that only lets certain users register a password?
I want to put this on my server and give my staff the ability to register a password, and I don't want the Regular players able to set a password at all.
Is this supported at all?
-
View User Profile
-
Send Message
Posted Apr 25, 2014Can you add a fake position when i am in the screen login ?
-
View User Profile
-
Send Message
Posted Apr 19, 2014Hi, i'm trying to use your plugin for my server. My users create an account on my server's website, with a password. I want to use that password to login in the game.
Then I set up the MySQL DB and when I register from the game with /register <password> it works fine. But when I try to add a player in the database from PHP, it doesn't works ! I'm using SHA-1 algorithm, and i proceed like that :
$password=base64_encode(sha1($ClearPassword,1));
When I try to login in the game, i got an "Invalid password" error... Then i tried to register from the game an other account with the same password. In my MysqlDB, the two password fields are exactly the same. It works with the in-game registered account, not with the myself-registered...
So i think it's an encoding issue, i'm using UTF-8 with php and with the plugin. BTW, the Mysql table created by the plugin have a "latin1_swedish_ci" instead of utf8 (it doesn't matter i think).
Can you help me ? Here is my code if needed :
Thanks.
PS: what's the utility of the IP field ?
-
View User Profile
-
Send Message
Posted Apr 17, 2014Nevermind, I already got it working.
If there is / will be anyone having the same problems, the solution that worked for me was adding "essentials.help.loginsecurity" to my permissions-file.
You're welcome, bye. ;)
-
View User Profile
-
Send Message
Posted Apr 17, 2014Does anyone have an idea what the permissions-node is to see login-security help? I am using PermissionsEX and set the permissions so the players can use the commands /register, /login, /changepass & /logout.
These can be used without any problems, still nobody can view the commands using /help or /help loginsecurity except me as the operator.
Further information: We are using Essentials but everyone of the players got the permission essentials.help
-
View User Profile
-
Send Message
Posted Apr 16, 2014Forgive me for not checking first but I'm rather busy. Does anyone know if login security MySQL has support for a sessions table? That way the users will keep their session switching between servers?
-
View User Profile
-
Send Message
Posted Apr 16, 2014@wildertnis
if you relog there is a 60 second session. Wich means if you join back within 60 seconds using the same ip you will be automacly logged in.
This can be configured.
@streetkilln
What do you mean by that?
-
View User Profile
-
Send Message
Posted Apr 15, 2014can u set login for certain groups?
-
View User Profile
-
Send Message
Posted Apr 15, 2014Players that use /register [password] don't have to login when they leave my server and join again. It Works with me, but not with other players.
any help?
-
View User Profile
-
Send Message
Posted Apr 15, 2014UUID hotfix uploaded to jenkins. Could some people help me testing?
Make sure to create backups and read the log when starting
-
View User Profile
-
Send Message
Posted Apr 7, 2014as i have registration though my website i dont like the message "Please register using /register <password>". It should not be possible to do the registration in game. My suggestion are therefore the possibility to change or remove this message.
My second suggestion is the possibility to use an other table than users. Two easy config setting.
ty for a usefull plugin!
-
View User Profile
-
Send Message
Posted Apr 3, 2014my i suggest adding java mail ? making it able to register via mail. and recover password via mail
-
View User Profile
-
Send Message
Posted Mar 31, 2014After i installed Login security, My login and logout message is missing. How do i fix this??
-
View User Profile
-
Send Message
Posted Mar 31, 2014Hi so far ive setup mysql and md5 to work on this. How do i disable the in game /register so all registrations happens on my site via the code ive written to write to mysql?
-
View User Profile
-
Send Message
Posted Mar 22, 2014Hey, could you make a permission node that makes that a player is inmune to someone else changing his password? I would like to give the staff the capacity to change newcomers their password but i dont wanna make them able to change eachothers password. Thanks already Onyx
-
View User Profile
-
Send Message
Posted Mar 22, 2014@Lenis0012
The world spawn is fine. I marked it as a safezone and turned it and the area around it into a marketplace.
The problem only occurs when I use fake locations. Players will spawn at the market. After supplying the password some players will be teleported to below the ground presumably the point they last logged out of. There is one instance that the player was stuck between leaves and started choking.
I think the plugin has some problem restoring the player to the place it last logged out of.