LoginSecurity

LoginSecurity
LoginSecurity is a lightweight password authorization plugin. You can optionally set a password each time you enter the server, adding a double layer of security to your account. The password is stored inside the configuration file, nobody else except the server owner can access or modify it.
How does it work?
Install the pluign to your /plugins/ directory, then start your server.
Type /register <password>, your account is now locked with a password.
For each time you login, make sure to use /login <password>.
Features
- Register your account optional or required (change in config)
- 5 Useful commands to mangage your password
- Advanced administrative control
- Advanced documentation via wiki
- Secure password storage using BCrypt
- Secure sessions storing to improve user experience
- Customizable time-out
- Map captcha upon registration (user friendly)
- Conversion from AuthMe and xAuth (check wiki for more info)
- Premium support through AutoIn
- Automatic update with changelog overview
- Username filtering (length and characters)
- Highly detailed configuration
- Automatically updated translation manager (user-submitted)
- Prevents being kicked by orther players loging in with your name
Session login allows the user to log in right after they logged out and not have to type in their password again. (1 minute time limit of being logged out, stores IP during that time to keep everything safe)
Commands
/lac - Admin command, rmpass and reload
/register <password> - Set your password
/login <password> - Login with your password
/changepass <old> <new> - change your password
/logout - Logout
Permissions
- loginsecurity.admin - allows admin command
- loginsecurity.update - shows update notifications
Video
Thanks to ServerMiner for making this informative tutorial
Orther tutorials: German (by MineCraftler4Live)
Planned
- Add translation interface for easier language selection
- Suggestions?
Known Bugs
- Players can mount/dismount and ride on vehicles while not logged in
Disclaimer
By default, LoginSecurity will check for updates from bukkitdev every 3 hours.
This feature can be disabled by setting "update-checker" to "false"
Anyone with the permission node ls.admin will be notified of updates, and it also able to download them via /lac update.
Which again can be disabled by disabling the update-checker
This plugin utilises Hidendra's plugin metrics system, which means that the following information is collected and sent to mcstats.org:
- A unique identifier
- The server's version of Java
- Whether the server is in offline or online mode
- The plugin's version
- The server's version
- The OS version/name and architecture
- The core count for the CPU
- The number of players online
The Metrics version Opting out of this service can be done by editing plugins/Plugin Metrics/config.yml and changing opt-out to true.
Additionally, when the language setting is changed, information is retrieved from lang.lenis0012.com to aquire up to date translations.
Links
- v3.0.2 - Download (18 - 1.15)
- Source code (GitHub)
- https://github.com/lenis0012/LoginSecurity-2/wiki (Wiki)
- https://github.com/lenis0012/Translations/wiki/Contribute (Translation Contribution)
Donate
If you want to support me working on this project, please donate.
It helps me alot to keep my projects up.
Donate at the top right corner
-
View User Profile
-
Send Message
Posted May 19, 2013I used this plugin for my server but it kicks me out when login it gives me an exception error
-
View User Profile
-
Send Message
Posted May 18, 2013can u do a like /safeip and ur pass if u login whit this ip u auto login
-
View User Profile
-
Send Message
Posted May 17, 2013Hey man Can you put /lac back because Some people forget there password and how can I know it and Change it??
-
View User Profile
-
Send Message
Posted Dec 1, 2016Get the latest version.
-
View User Profile
-
Send Message
Posted May 15, 2013@shepd
I dont want to cheat on bukkit's command system just to make it not display in the log.
-
View User Profile
-
Send Message
Posted May 15, 2013Thanks for an awesome plugin. Works great!
And to those who worry about MD5 encryption not being enough, consider this. To even have a chance at finding a collision you need the MD5 string. To get that you need access to the database, which generally means access to the server. If you have access to the database, you can just put a new password in for that user, or even delete it (yes, I've done that when I forgot my password... LOL... I'm more forgetful than the users)! It doesn't matter what encryption or hashing is used if you have that level of access.
And if the server owner isn't sending server.log to /dev/null, all the passwords are plaintext there anyways and I doubt there's much any plugin author can do to change that.
-
View User Profile
-
Send Message
Posted May 14, 2013@OfficialRedZy
support comming soon
I ave exams this week and i have no time to update my plugins atm
-
View User Profile
-
Send Message
Posted May 14, 2013-
View User Profile
-
Send Message
Posted May 12, 2013make it so you have to have permissions to set a password
-
View User Profile
-
Send Message
Posted May 12, 2013@Skizzlle
It does fix that yes
-
View User Profile
-
Send Message
Posted May 9, 2013suggestion: add a config reload command.
-
View User Profile
-
Send Message
Posted May 9, 2013I'll make my own language (Dutch), but when I click "create your own" it says no permission for that page.
-
View User Profile
-
Send Message
Posted May 9, 2013Cheers lenis0012 appreciate you trying :) just find it annoying as users can easily read passwords from the console if there within the servers vicinity.
-
View User Profile
-
Send Message
Posted May 8, 2013Is this like xauth? Because with xauth I problem were somone new join and registers and gets teleported outside of spawn will this fix the problem? PLZ reply
-
View User Profile
-
Send Message
Posted May 8, 2013make it so you have to have permissions to set a password
-
View User Profile
-
Send Message
Posted May 8, 2013@ConnectCraft
Allright then.
Ill have a look at it soon
-
View User Profile
-
Send Message
Posted May 7, 2013@lenis0012
i actually need to tell you thats wrong
some other loginplugins do not show that, also worldedit..
-
View User Profile
-
Send Message
Posted May 6, 2013@xNova13
very strange
I will see what i can do to fix it
@tomeous
regarding to me that is hardcoded in bukkit.
Wich i cannot disable
Tell me if im wrong.
It might just be Essentials
-
View User Profile
-
Send Message
Posted May 6, 2013Would it be possible to make the passwords not show up on the bukkit console window or not to show the server commands issued. Maybe make it selectable in options.
-
View User Profile
-
Send Message
Posted May 6, 2013Timeout still bugging out. Sometimes, kicking people immediately as they connect to the server.