LoginSecurity

LoginSecurity
LoginSecurity is a lightweight password authorization plugin. You can optionally set a password each time you enter the server, adding a double layer of security to your account. The password is stored inside the configuration file, nobody else except the server owner can access or modify it.
How does it work?
Install the pluign to your /plugins/ directory, then start your server.
Type /register <password>, your account is now locked with a password.
For each time you login, make sure to use /login <password>.
Features
- Register your account optional or required (change in config)
- 5 Useful commands to mangage your password
- Advanced administrative control
- Advanced documentation via wiki
- Secure password storage using BCrypt
- Secure sessions storing to improve user experience
- Customizable time-out
- Map captcha upon registration (user friendly)
- Conversion from AuthMe and xAuth (check wiki for more info)
- Premium support through AutoIn
- Automatic update with changelog overview
- Username filtering (length and characters)
- Highly detailed configuration
- Automatically updated translation manager (user-submitted)
- Prevents being kicked by orther players loging in with your name
Session login allows the user to log in right after they logged out and not have to type in their password again. (1 minute time limit of being logged out, stores IP during that time to keep everything safe)
Commands
/lac - Admin command, rmpass and reload
/register <password> - Set your password
/login <password> - Login with your password
/changepass <old> <new> - change your password
/logout - Logout
Permissions
- loginsecurity.admin - allows admin command
- loginsecurity.update - shows update notifications
Video
Thanks to ServerMiner for making this informative tutorial
Orther tutorials: German (by MineCraftler4Live)
Planned
- Add translation interface for easier language selection
- Suggestions?
Known Bugs
- Players can mount/dismount and ride on vehicles while not logged in
Disclaimer
By default, LoginSecurity will check for updates from bukkitdev every 3 hours.
This feature can be disabled by setting "update-checker" to "false"
Anyone with the permission node ls.admin will be notified of updates, and it also able to download them via /lac update.
Which again can be disabled by disabling the update-checker
This plugin utilises Hidendra's plugin metrics system, which means that the following information is collected and sent to mcstats.org:
- A unique identifier
- The server's version of Java
- Whether the server is in offline or online mode
- The plugin's version
- The server's version
- The OS version/name and architecture
- The core count for the CPU
- The number of players online
The Metrics version Opting out of this service can be done by editing plugins/Plugin Metrics/config.yml and changing opt-out to true.
Additionally, when the language setting is changed, information is retrieved from lang.lenis0012.com to aquire up to date translations.
Links
- v3.0.2 - Download (18 - 1.15)
- Source code (GitHub)
- https://github.com/lenis0012/LoginSecurity-2/wiki (Wiki)
- https://github.com/lenis0012/Translations/wiki/Contribute (Translation Contribution)
Donate
If you want to support me working on this project, please donate.
It helps me alot to keep my projects up.
Donate at the top right corner
-
View User Profile
-
Send Message
Posted Jul 14, 2014Could you please make customization messages. For example when it says Invalid password Make it so we can change it to what we want such as 'Invalid password, if you forgot your password please contact us here : site'
Thanks!
-
View User Profile
-
Send Message
Posted Jul 13, 2014LoginSecurity 1.0.10 will be released when we reach 15,000 downloads on v1.0.9 I do this because i want all version to be tested very well before i move on
-
View User Profile
-
Send Message
Posted Jul 13, 2014@Dyenx999
You may want to update your LoginSecurity =)
@FabioZumbi12
At the moment the onyl web-encryption we support is PHPBB3 But i will look in to this
-
View User Profile
-
Send Message
Posted Jul 10, 2014Minor Bug
Drinkin milk removes the blindness effect
- sorry, may is fixed already... using the old 1.6.4 version
-
View User Profile
-
Send Message
Posted Jul 8, 2014Howw lenis, you are the owner of this plugin too - Man, i trying to use my server database to authenticate players on my joomla site. Your plugin have support to hash joomla 3.3.1 security?
Thank You!
-
View User Profile
-
Send Message
Posted Jul 7, 2014@Dyenx999
I tried replicating that problem, but it didn't work. Seems fine for me.
-
View User Profile
-
Send Message
Posted Jul 7, 2014@lenis0012
Can u make a feature where if the player already is registered with 1 name per say Bob they cannot login again with the name BoB and register as that player beacuse we had that problem where a player was already registered as example and when someone logged in as Example they got access to thier account
-
View User Profile
-
Send Message
Posted Jul 7, 2014@Fabricio20
I like the idea.
But i will make an LoginSecurityEvent instead with LoginResult enum.
Ill work on that after my finals
-
View User Profile
-
Send Message
Posted Jul 5, 2014Ideia: Add support to listen to an "UserSucefullyLoginEvent", that is called when an user sucefully use /login or /register ;)
-
View User Profile
-
Send Message
Posted Jul 3, 2014@lenis0012
Hi, now is the bug with MySQl corrected. Thanks.
And what do the fake-location in the confing?
-
View User Profile
-
Send Message
Posted Jul 2, 2014@lenis0012
Hi :)
Can you make a config.yml where you can set message, and lock account per ip ? Set where user spawn for the first time , the world and x, y, z coords
It is possible ? Sorry for my bad english i'm french !
-
View User Profile
-
Send Message
Posted Jul 2, 2014Hi guys!
I new dev build is out on our jenkins.
Go and grab it and give me your opinion!
-
View User Profile
-
Send Message
Posted Jun 28, 2014Suggestion : make a list of blacklisted password (like qwerty etc..)
-
View User Profile
-
Send Message
Posted Jun 25, 2014in package com.lenis0012.bukkit.ls.data; for MySQL class you have one problem.
line 158:
PreparedStatement ps = con.prepareStatement("INSERT INTO " + table + "unique_user_id,password,encryption,ip) VALUES(?,?,?,?);");
Missing a parenthesis , remplace by : PreparedStatement ps = con.prepareStatement("INSERT INTO " + table + " (`unique_user_id`,`password`,`encryption`,`ip`) VALUES(?,?,?,?);");
For exemple.
-
View User Profile
-
Send Message
Posted Jun 23, 2014Please Help
Hi, this plugin is working. Between i want to tell something. When i log onto my server it really does not ask me for /login or /register , please, if anyone knows the result on this problem please help. You can help me with my email thank you :) dgorenjak@gmail.com Thank you for reading -Heros133
-
View User Profile
-
Send Message
Posted Jun 22, 2014Come on guys, please help me!
E-MAIL
milos.bajic96@hotmail.com
-
View User Profile
-
Send Message
Posted Jun 21, 2014Please help me! Prevents being kicked by orther players loging in with your name
I dont know how to enable that? i have 1.7.2 version! Please help, player keep logging on other player account while they are in combat, thats how they kill them so i need to prevent that!
HELP PLEASE!
If you know the answer you can help me by e-mail
milos.bajic96@hotmail.com
-
View User Profile
-
Send Message
Posted Jun 20, 2014@lenis0012
Hi,
how look with the fix of the bug with MySQL?
-
View User Profile
-
Send Message
Posted Jun 17, 2014There is bug. if you go in with name Mark and register usually. if other player comes with name Example: MarK or mark or MARK he can register again, and can use ur character. donators got fkd up because of this
-
View User Profile
-
Send Message
Posted Jun 12, 2014Can I use this to be implemented in my website?