LoginSecurity

LoginSecurity
LoginSecurity is a lightweight password authorization plugin. You can optionally set a password each time you enter the server, adding a double layer of security to your account. The password is stored inside the configuration file, nobody else except the server owner can access or modify it.
How does it work?
Install the pluign to your /plugins/ directory, then start your server.
Type /register <password>, your account is now locked with a password.
For each time you login, make sure to use /login <password>.
Features
- Register your account optional or required (change in config)
- 5 Useful commands to mangage your password
- Advanced administrative control
- Advanced documentation via wiki
- Secure password storage using BCrypt
- Secure sessions storing to improve user experience
- Customizable time-out
- Map captcha upon registration (user friendly)
- Conversion from AuthMe and xAuth (check wiki for more info)
- Premium support through AutoIn
- Automatic update with changelog overview
- Username filtering (length and characters)
- Highly detailed configuration
- Automatically updated translation manager (user-submitted)
- Prevents being kicked by orther players loging in with your name
Session login allows the user to log in right after they logged out and not have to type in their password again. (1 minute time limit of being logged out, stores IP during that time to keep everything safe)
Commands
/lac - Admin command, rmpass and reload
/register <password> - Set your password
/login <password> - Login with your password
/changepass <old> <new> - change your password
/logout - Logout
Permissions
- loginsecurity.admin - allows admin command
- loginsecurity.update - shows update notifications
Video
Thanks to ServerMiner for making this informative tutorial
Orther tutorials: German (by MineCraftler4Live)
Planned
- Add translation interface for easier language selection
- Suggestions?
Known Bugs
- Players can mount/dismount and ride on vehicles while not logged in
Disclaimer
By default, LoginSecurity will check for updates from bukkitdev every 3 hours.
This feature can be disabled by setting "update-checker" to "false"
Anyone with the permission node ls.admin will be notified of updates, and it also able to download them via /lac update.
Which again can be disabled by disabling the update-checker
This plugin utilises Hidendra's plugin metrics system, which means that the following information is collected and sent to mcstats.org:
- A unique identifier
- The server's version of Java
- Whether the server is in offline or online mode
- The plugin's version
- The server's version
- The OS version/name and architecture
- The core count for the CPU
- The number of players online
The Metrics version Opting out of this service can be done by editing plugins/Plugin Metrics/config.yml and changing opt-out to true.
Additionally, when the language setting is changed, information is retrieved from lang.lenis0012.com to aquire up to date translations.
Links
- v3.0.2 - Download (18 - 1.15)
- Source code (GitHub)
- https://github.com/lenis0012/LoginSecurity-2/wiki (Wiki)
- https://github.com/lenis0012/Translations/wiki/Contribute (Translation Contribution)
Donate
If you want to support me working on this project, please donate.
It helps me alot to keep my projects up.
Donate at the top right corner
-
View User Profile
-
Send Message
Posted Aug 25, 2013@Homie_Dawg2629
ask an admin to reset it for you
@broluigi
Stealing your ip address? thats new to me.
@FinWiz
Simply, keep the xAuth fodler and jar in your plugins folder. then add the LoginSecurity jar and launch your server. Then the magic will hapen
@dominik246
/lac
@einargretch
decrypting is not possible
@thefear900
Not doing this for security reasons. Some people sue the same one ingame as for their mc account
@Vuziman
under the blue header saying: 'Permissions'
@thefear900
Most people own their own server :P try using /lac changepass <user> <new password>
-
View User Profile
-
Send Message
Posted Aug 24, 2013Where can I find where player's passwords are in the config. I was hacked and my password was guessed. The hacker changed it too and I need to be able to find my password
-
View User Profile
-
Send Message
Posted Aug 23, 2013There is a IP exploit! people can steal your IP address and then login as you with a spoof IP
-
View User Profile
-
Send Message
Posted Aug 21, 2013You can do also a MySQL Register...
-
View User Profile
-
Send Message
Posted Aug 19, 2013How is xAuth converter supposed to work? Does it import password from xAuth anfd if so, how?
-
View User Profile
-
Send Message
Posted Aug 19, 2013I have a suggestion, why don't you make that I as an owner/admin of the server can change whoevers password with a specific command ?
for example if he forgets the password I can just change it
-
View User Profile
-
Send Message
Posted Aug 18, 2013How can i decrypt this so i can use it on my webpage for login? i have tried using md5() on php but it doesn't work D:
-
View User Profile
-
Send Message
Posted Aug 17, 2013Put the option for Op's to see the Players,Helpers,Mod's and Admin Passwords
-
View User Profile
-
Send Message
Posted Aug 14, 2013@thefear900
Nevermind, I changed the passwords manually.
-
View User Profile
-
Send Message
Posted Aug 14, 2013Where is the permisson list for this plugin ?
-
View User Profile
-
Send Message
Posted Aug 13, 2013Hello, I am the owner of my server and I would like to know if I can change someone's password myself without logging in as them... I need to permanently prevent a person from coming on the server and bans and ipbans aren't enough... Is there a command for that or will I have to log in through them? Please help.
-
View User Profile
-
Send Message
Posted Aug 12, 2013Why don't you make a language.yml file ?
-
View User Profile
-
Send Message
Posted Aug 11, 2013Could you make permissions that will make certain Rank groups have passwords? I find that passwords is a must for staff ranks, but should be optional for Member ranks or default ranks.
-
View User Profile
-
Send Message
Posted Aug 9, 2013I need help I forgot my password and can't log into a server is there a way to reset it without knowing the old one?
-
View User Profile
-
Send Message
Posted Aug 5, 2013@lenis0012
Jenkins is Down :P
-
View User Profile
-
Send Message
Posted Aug 4, 2013@xDizasterCYx
nice idea =)
-
View User Profile
-
Send Message
Posted Aug 4, 2013@broluigi
use latest dev build?
-
View User Profile
-
Send Message
Posted Aug 4, 2013@AnimusTheHUN
not verry smart to posy here. But i dont think this is caused by LoginSecurity. I dont touch inventories
-
View User Profile
-
Send Message
Posted Aug 3, 2013important suggestion: /ls setloginspawn sets where the player will spawn.
-
View User Profile
-
Send Message
Posted Aug 1, 2013Hey!
This mod can not distinguish between upper and lowercase letters!!! This is an EPIC BUG!
Example on any offline mode server: User log in with lowercase, drop his items, log off. Than log in with uppercase (different latter size) and they still have items in hand, and now on floor to. Pick them up, and tadaam.. Item dupe.
We tested it on MC 1.5.2 with 2.0.4v of LoginSecurity.