LoginSecurity

LoginSecurity
LoginSecurity is a lightweight password authorization plugin. You can optionally set a password each time you enter the server, adding a double layer of security to your account. The password is stored inside the configuration file, nobody else except the server owner can access or modify it.
How does it work?
Install the pluign to your /plugins/ directory, then start your server.
Type /register <password>, your account is now locked with a password.
For each time you login, make sure to use /login <password>.
Features
- Register your account optional or required (change in config)
- 5 Useful commands to mangage your password
- Advanced administrative control
- Advanced documentation via wiki
- Secure password storage using BCrypt
- Secure sessions storing to improve user experience
- Customizable time-out
- Map captcha upon registration (user friendly)
- Conversion from AuthMe and xAuth (check wiki for more info)
- Premium support through AutoIn
- Automatic update with changelog overview
- Username filtering (length and characters)
- Highly detailed configuration
- Automatically updated translation manager (user-submitted)
- Prevents being kicked by orther players loging in with your name
Session login allows the user to log in right after they logged out and not have to type in their password again. (1 minute time limit of being logged out, stores IP during that time to keep everything safe)
Commands
/lac - Admin command, rmpass and reload
/register <password> - Set your password
/login <password> - Login with your password
/changepass <old> <new> - change your password
/logout - Logout
Permissions
- loginsecurity.admin - allows admin command
- loginsecurity.update - shows update notifications
Video
Thanks to ServerMiner for making this informative tutorial
Orther tutorials: German (by MineCraftler4Live)
Planned
- Add translation interface for easier language selection
- Suggestions?
Known Bugs
- Players can mount/dismount and ride on vehicles while not logged in
Disclaimer
By default, LoginSecurity will check for updates from bukkitdev every 3 hours.
This feature can be disabled by setting "update-checker" to "false"
Anyone with the permission node ls.admin will be notified of updates, and it also able to download them via /lac update.
Which again can be disabled by disabling the update-checker
This plugin utilises Hidendra's plugin metrics system, which means that the following information is collected and sent to mcstats.org:
- A unique identifier
- The server's version of Java
- Whether the server is in offline or online mode
- The plugin's version
- The server's version
- The OS version/name and architecture
- The core count for the CPU
- The number of players online
The Metrics version Opting out of this service can be done by editing plugins/Plugin Metrics/config.yml and changing opt-out to true.
Additionally, when the language setting is changed, information is retrieved from lang.lenis0012.com to aquire up to date translations.
Links
- v3.0.2 - Download (18 - 1.15)
- Source code (GitHub)
- https://github.com/lenis0012/LoginSecurity-2/wiki (Wiki)
- https://github.com/lenis0012/Translations/wiki/Contribute (Translation Contribution)
Donate
If you want to support me working on this project, please donate.
It helps me alot to keep my projects up.
Donate at the top right corner
-
View User Profile
-
Send Message
Posted Jan 9, 2013And my no cheat will kick them, no ?
-
View User Profile
-
Send Message
Posted Jan 9, 2013@ric0o
allow flying
-
View User Profile
-
Send Message
Posted Jan 9, 2013When a new user is connecting, he is flying so the server disconnect him because of the fly whitch is disable. Any solution to my problem ?
Sorry for my english, i'm french.
-
View User Profile
-
Send Message
Posted Jan 7, 2013@dmncpham
The chat is untrue, maybe its your chat plugin but i tested it without a chat plugin and with EssentialsChat and ChatManager.
-
View User Profile
-
Send Message
Posted Jan 7, 2013@lenis0012
Hello, I also noticed another bug. You can chat before logging in. Also, the previous problem about getting kicked when you're already logged in has not been fixed yet.
-
View User Profile
-
Send Message
Posted Jan 7, 2013LoginSecurity v1.6.9 has a little issue.
I felt like it should be fixed, so i released v1.6.9.1
-
View User Profile
-
Send Message
Posted Jan 6, 2013@dmncpham
Fixed in v1.6.9.
together with the bug that it shows: use /setpass <password>
when it suppost to show: use /login <password>
All translations wtill work.
Message format changing next release
and a little surprise for next release (you will notice)
-
View User Profile
-
Send Message
Posted Jan 5, 2013One of my users is having a problem, hes already logged in and he keeps getting this problem: http://i.imgur.com/CgQxW.jpg He's the only one to get it, not sure if this is a problem with the plugin or if its his connection since he lives pretty far away from where the server is hosted on..
-
View User Profile
-
Send Message
Posted Jan 5, 2013@dmncpham
I just saw that, the AsyncPlayerPreLoginEvent no longer works, wheird.
-
View User Profile
-
Send Message
Posted Jan 4, 2013@lenis0012
I was logged in and I got that message when someone else logged into my account.
-
View User Profile
-
Send Message
Posted Jan 4, 2013Can you fix the factions exploit? Thats a HUGE bug.
-
View User Profile
-
Send Message
Posted Jan 4, 2013[suggestion]
You could add a forgetpassword for users if they forget their password.
-
View User Profile
-
Send Message
Posted Jan 4, 2013@coolo1
the ip lock is implemented in the session if thats what you mean
-
View User Profile
-
Send Message
Posted Jan 4, 2013Is th IP lock done? Really need it...
-
View User Profile
-
Send Message
Posted Jan 4, 2013@dmncpham
it only works when you are logged in
not when you still need to log in, in that case everyone could prevent you form joining
@mammuthuslol
ill chekk on it
-
View User Profile
-
Send Message
Posted Jan 3, 2013@lenis0012
Hello, for some reason, I still get the "You are logged in from another location" message when someone else tries to log into my account.
-
View User Profile
-
Send Message
Posted Jan 3, 2013Not yet
but it is planned? It will be good to change xauth to LoginSecurity without any troubles for players.
-
View User Profile
-
Send Message
Posted Jan 3, 2013@dmncpham
1. There is no setting for that, its in there by default
2. Probably
@mammuthuslol
Not yet
its up2date, has better control and uses less ram/cpu
-
View User Profile
-
Send Message
Posted Jan 3, 2013How can I convert already registered users from xAuth v2.0.26 plugins to LoginSecurity?
And can you tell me, in what case LoginSecurity will be better than xAuth?
Thank you.
P.S. I'm using bukkit server 1.4.5 R0.2
-
View User Profile
-
Send Message
Posted Jan 3, 2013Hi, what setting do you need to change to prevent getting kicked if you're already logged in? Also, can you prevent users from accessing their inventory without being logged?