LoginSecurity

LoginSecurity
LoginSecurity is a lightweight password authorization plugin. You can optionally set a password each time you enter the server, adding a double layer of security to your account. The password is stored inside the configuration file, nobody else except the server owner can access or modify it.
How does it work?
Install the pluign to your /plugins/ directory, then start your server.
Type /register <password>, your account is now locked with a password.
For each time you login, make sure to use /login <password>.
Features
- Register your account optional or required (change in config)
- 5 Useful commands to mangage your password
- Advanced administrative control
- Advanced documentation via wiki
- Secure password storage using BCrypt
- Secure sessions storing to improve user experience
- Customizable time-out
- Map captcha upon registration (user friendly)
- Conversion from AuthMe and xAuth (check wiki for more info)
- Premium support through AutoIn
- Automatic update with changelog overview
- Username filtering (length and characters)
- Highly detailed configuration
- Automatically updated translation manager (user-submitted)
- Prevents being kicked by orther players loging in with your name
Session login allows the user to log in right after they logged out and not have to type in their password again. (1 minute time limit of being logged out, stores IP during that time to keep everything safe)
Commands
/lac - Admin command, rmpass and reload
/register <password> - Set your password
/login <password> - Login with your password
/changepass <old> <new> - change your password
/logout - Logout
Permissions
- loginsecurity.admin - allows admin command
- loginsecurity.update - shows update notifications
Video
Thanks to ServerMiner for making this informative tutorial
Orther tutorials: German (by MineCraftler4Live)
Planned
- Add translation interface for easier language selection
- Suggestions?
Known Bugs
- Players can mount/dismount and ride on vehicles while not logged in
Disclaimer
By default, LoginSecurity will check for updates from bukkitdev every 3 hours.
This feature can be disabled by setting "update-checker" to "false"
Anyone with the permission node ls.admin will be notified of updates, and it also able to download them via /lac update.
Which again can be disabled by disabling the update-checker
This plugin utilises Hidendra's plugin metrics system, which means that the following information is collected and sent to mcstats.org:
- A unique identifier
- The server's version of Java
- Whether the server is in offline or online mode
- The plugin's version
- The server's version
- The OS version/name and architecture
- The core count for the CPU
- The number of players online
The Metrics version Opting out of this service can be done by editing plugins/Plugin Metrics/config.yml and changing opt-out to true.
Additionally, when the language setting is changed, information is retrieved from lang.lenis0012.com to aquire up to date translations.
Links
- v3.0.2 - Download (18 - 1.15)
- Source code (GitHub)
- https://github.com/lenis0012/LoginSecurity-2/wiki (Wiki)
- https://github.com/lenis0012/Translations/wiki/Contribute (Translation Contribution)
Donate
If you want to support me working on this project, please donate.
It helps me alot to keep my projects up.
Donate at the top right corner
-
View User Profile
-
Send Message
Posted May 31, 2015Could you please add option that before you are logged into your account you are teleported to spawn and when you login you are back to your previous location. This would be really cool because some people may get your location in this way (coordinates)
-
View User Profile
-
Send Message
Posted May 25, 2015The Jenkins dev builds are back up btw. =)
-
View User Profile
-
Send Message
Posted May 25, 2015@Rouchesta
this issue was resolved a while ago. @RedLegJohnny
This issue is not related to my plugin.
On a side note of things, its been quiet for a while, but im working on a new version should be out soon Feel free to PM me if i forget about it ;P
-
View User Profile
-
Send Message
Posted May 24, 20151.8 Problem with Uppercase. Everybody can steal the account of all player of the server by changing only one letter. (Uppercase or not)
-
View User Profile
-
Send Message
Posted Dec 1, 2016Update to latest version
-
View User Profile
-
Send Message
Posted May 23, 2015Can I translated this plugin into Traditional Chinese language?
-
View User Profile
-
Send Message
Posted May 22, 2015does it stop players from multi-accounting or like does it have limited players per ip?
-
View User Profile
-
Send Message
Posted May 20, 2015@lenis0012 Suggestion: Add permission that certain groups get this login register. For example server owner wants to have login thing popup to everybody in staff, but not default people.
-
View User Profile
-
Send Message
Posted May 14, 2015You need to add IP check. Why ? Because ... if i do /register toto pass pass (toto is an admin on the server) A bad play comes and do /register Toto pass pass The bad player will have the rights of toto. You plugin don't check MAJ and MIN letters. Se everybodu can use the account of all players.
-
View User Profile
-
Send Message
Posted Apr 19, 2015Hi in plugin dont have max account for user? i need pls udpate sorry for bad engliash bye and thanks for the plugin
-
View User Profile
-
Send Message
Posted Apr 12, 2015if u forget ur password how do u change it?
-
View User Profile
-
Send Message
Posted Dec 1, 2016Admin command: /lac
-
View User Profile
-
Send Message
Posted Mar 24, 2015@DoNot_SpamPls
Rmpass doesnt work. I would strongly recommend using a different plugin as I work on a fix.
-
View User Profile
-
Send Message
Posted Mar 21, 2015Hello, I have a problem When I try to use /lac rmpass (Username) It says Invalid username. Am I doing something wrong? Please help
-
View User Profile
-
Send Message
Posted Mar 14, 2015For the message api can you add it so I can have a custom message, because players get confused with the one by default.
-
View User Profile
-
Send Message
Posted Mar 11, 2015hey everyone,
okay, so I got a bug (as far as known) about the plugin. always after a few hours of playing(between 2 to 8 hours) the server stops resopnding, everyone gets a time out error and after five minutes the server gives an error log and stops working. http://pastebin.com/dUu1YyPG that is the error log. well, since there are more plugins I was at a loss, but Thinkofdeath said it was this plugin (original post on spigot -> https://hub.spigotmc.org/jira/browse/SPIGOT-679 )
I hope you guys have any Idea what I can do about it. RedLegJohnny
-
View User Profile
-
Send Message
Posted Mar 10, 2015@ElekzaliZ
I use it on latest 1.8.3 spigot without problems.
-
View User Profile
-
Send Message
Posted Mar 4, 2015Hi all!
Is it compatible with Spigot 1.8?
-
View User Profile
-
Send Message
Posted Jan 31, 2015Very nice thank you!
Ive some questions, please help me.
I would like to make a recovery password from my website and just to learn somethings about this plugin.
1) How to save the password in DB without encription? I see in config file: encription: BCRYPT, but what i have to put to set it just plaintext? Ive already tryied PLAINTEXT, false, none but was all the same. No differences.
2) In DB have a unique_user_id coluum: that's a lot of characters. And an encryption coluum too. How could i insert more 2 colums: nick (in-game) and e-mail? So the user will register with: /register pass e-mail Or register from my website. And i will be allowed to make a recover password from e-mail :D
And i found a bug: sometimes you can open doors without had logged in. And the screen isn't dark (ive set up the blindness to true).
Thank you very much!
-
View User Profile
-
Send Message
Posted Jan 30, 2015i kinda forgot my password on my friend's server and now im screwed pretty much