CrazyLogin

CrazyLogin

Version 7.15

Its recommended to run your server in online mode!
Minecraft is a excellent game. If you want to play it, you should buy it, like every other game you play.

Description

Adds per player passwords to your server. This will increase your server's protection against griefers and account thiefs.

Keep these two things in mind:

  1. The protection is only as good as your passwords.
  2. The server is still less secure then a server in online mode.
    • My plugin is not limited to offline mode servers,
      therefore you can increase security for both server types (offline and online mode servers).

Features

  • This plugin supports two modes. Maybe-Password and Password-Only
    • Maybe-Password:
      The user can create a password, if he wants to
      (for everybody with special server rights)
    • Password-Only:
      The user has to create a password and login.
  • Users who aren't logged in, cannot chat, build, fight, drop items, move, teleport.
  • (Optional) Ability to hide/change Join/Quit-Messages, hide players who aren't logged in.
  • Multiple password Encryption algorithms
  • AuthMe, xAuth support
  • Integrated Config, Flat, MySQL and SQLite-Database support.
  • Integrated Logging support.
  • Integrated CrazyPipes support.
  • Session support
    • Supports single sessions
    • saveLogins (teleport to spawn until login).
    • If you do not logout and autoLogout is disabled, you can rejoin from the same IP.
  • Permission + option to disable ingame registration.
  • forceSaveLogin option to hide the players current location until login
    • this fixes the issues with AntiCheat being kicked for flying due to anti move protection.
  • maxRegistrationsPerIP and maxOnlinesPerIP options
  • Command usage is stricktly limited, when not logged in (whitelist).
  • Possibility to block guest commands, chat and join.
  • Warn players with permission, if some fails to login or execute a command if he isn't allowed to.
  • (Optional) Kick players who don't register, don't login, fail to login, execute a command.
  • (Optional) TempBan players who don't login or fail to login.
  • Adminlogin and Tokenlogin commands available
  • Command to logout automatically when leaving the server
  • Filter- & Sortable Accountlist
  • Playerinfo (Name, IP, Connection and more)
  • Ability to delete inactive accounts.
  • PluginAPI available
  • Client AutoLogin Plugin available (can be blocked)

Requirements

Configuration & Options

(with description of all available options)

Commands with their Permissions

Regular-Expression Help

Issues ?

CommandHelper

http://pastebin.com/Nz89TWdQ (Thanks to dermarionator)

Factions

Factions uses a very special way to execute commands, which bypasses default command protection.
Use this plugin to fix that until Faction fixed that:
CrazyLogin_FactionProtection

Others

Create a ticket or post a message!

Metrics

Metrics
(Generated by MCStats.org)

Languages

(Please post additional translations here, so i can share them to everybody!)

API-Source
Source

You must login to post a comment. Don't have an account? Register to get one!

  • Avatar of TheOneMadHawk TheOneMadHawk May 25, 2013 at 00:18 UTC - 0 likes

    @ThisUsernameIsMine: Go

    I downloaded the new builds *wink* but it didn't change anything :(
    (still showing multi-line messages on the same line with \n @ kick)

    I'll have a second lokk at that.
    Please send me the LocalePath of your message
    CRAZYLOGIN.KICK....

    I don't want to disable those requests ALL the time, but ONLY when disableRegistrations = TRUE

    This is currently not possible

    I would suggest switching between to language files in this case.
    or you can use real high numbers here.
    delayAuthRequests: 72000 < = the first message will be send after 1h
    repeatAuthRequests: 200 < this is not required to be changed
    autoKickUnregistered should be less than delayAuthRequests otherwise a player can see the message.
    There is still the message when actions are cancelled.

    Last edited May 25, 2013 by TheOneMadHawk

    You cannot be crazier than Crazy.
    Try and fail.

  • Avatar of ThisUsernameIsMine ThisUsernameIsMine May 24, 2013 at 22:56 UTC - 0 likes

    @TheOneMadHawk: Go

    I downloaded the new builds *wink* but it didn't change anything :(
    (still showing multi-line messages on the same line with \n @ kick)

    About the register-spam: The suggestion you made isn't what i'm looking for.

    I don't want to disable those requests ALL the time, but ONLY when disableRegistrations = TRUE ;-)

    Last edited May 24, 2013 by ThisUsernameIsMine
  • Avatar of TheOneMadHawk TheOneMadHawk May 24, 2013 at 18:38 UTC - 0 likes

    @ThisUsernameIsMine: Go

    i simply want to disable register requests completely when in-game registrations are disabled

    use your custom lang files and set empty messages

    CRAZYLOGIN.REGISTER.HEADER=
    CRAZYLOGIN.REGISTER.HEADER2=
    CRAZYLOGIN.REGISTER.REQUEST=
    

    Only when kicked.

    I'll fix that asap.
    EDIT: CrazyCore v10.6 and CrazyLogin v7.15.1 are waiting for approval

    Last edited May 24, 2013 by TheOneMadHawk
  • Avatar of ThisUsernameIsMine ThisUsernameIsMine May 23, 2013 at 20:37 UTC - 0 likes

    @TheOneMadHawk: Go

    Quote:

    There is a config option for that

    What i did so far is the following:

    crazylogin mode donotspamauthrequests
    22:30:36 [INFO] CrazyLogin] Mode "doNotSpamAuthRequests"="True" set
    crazylogin mode donotspamregisterrequests
    22:30:42 [INFO] [CrazyLogin] Mode "doNotSpamRegisterRequests"="True" set

    (i simply want to disable register requests completely when in-game registrations are disabled)

    If i can achieve this by using delayAuthRequests and repeatAuthRequests, please tell me which values i should use.

    Quote:

    does this only ocur when being kicked? or ingame too?

    Only when kicked.

    Last edited May 24, 2013 by ThisUsernameIsMine
  • Avatar of TheOneMadHawk TheOneMadHawk May 23, 2013 at 20:23 UTC - 0 likes

    @ThisUsernameIsMine: Go

    /crazylogin mode donotspamrequests doesn't seem to exist as command, but the config has it =/

    Thanks for this information.

    noticed another issue. When disabling in-game registrations and (auth/register)requests, they're still being broadcasted each 5 seconds, even after restarting the server.

    there is a config option for that

    I didn't had much time to test everything and i'm not sure for how long this issue has been around, but with CrazyCore 10.5 and CrazyLogin 7.15 the issue's still there:

    does this only occur when being kicked? or ingame too?

  • Avatar of ThisUsernameIsMine ThisUsernameIsMine May 23, 2013 at 18:38 UTC - 0 likes

    @TheOneMadHawk: Go

    Sorry for the late response. Was having trouble with my internet connection (amazing sluggish speed).

    I didn't had much time to test everything and i'm not sure for how long this issue has been around, but with CrazyCore 10.5 and CrazyLogin 7.15 the issue's still there:

    - http://i.imgur.com/iBjTXbJ.jpg

    I always keep my language files up-to-date (using my own informal translation) and i could not notice anything awkward, formatting-wise.

    I'm running the Beta build of Craftbukkit 1.5.2-R0.1 #2771

    Edit: noticed another issue. When disabling in-game registrations and (auth/register)requests, they're still being broadcasted each 5 seconds, even after restarting the server.

    hmm: /crazylogin mode donotspamrequests doesn't seem to exist as command, but the config has it =/

    Last edited May 23, 2013 by ThisUsernameIsMine
  • Avatar of TheOneMadHawk TheOneMadHawk May 16, 2013 at 20:54 UTC - 0 likes

    @ogurek90: Go

    There is no way to instantly convert databases.

    But you can use the password updater

    simply type
    /crazylogin mode algorithm MD5

    This is enable both algorithms and all passwords will be updated on login.

    If all passwords are converted (i guess after a month) you can execute the command again and only the new passwords work.

    @Nightiky: Go

    Simple:
    If you know how to code a webpage yes, otherwise no.

    Complete:
    First of all use MYSQL database connection in CrazyLogin. Use the table with the players names. (a column "password" (you can rename it) will be created, but does not contain any usefull data, although they might change from time to time).
    http://dev.bukkit.org/server-mods/crazycore/pages/mys-ql/
    You should use a recent CrazyCore release if you are using custom column names. (Had a bug in there)

    Then use WebCrypt encryption
    http://dev.bukkit.org/server-mods/crazylogin/pages/encryption/web/

    <Encrypt_URL> can be a dummy page which allways returns the same text. Example "CrazyLogin" Do not use an empty file.
    www.example.com/dummy.txt

    <Match_URL> this part is important. Use the Player=$0$ and Password=$1$ params to send them to the web page.
    This web page then should check in your database whether the password is correct.

    www.example.com/weblogin.php?player=$0$&password=$1$
    if the password is correct print "TRUE" (case insensitive) on that page something else otherwise.
    You have to code this page!

    You won't be able to change the password ingame.
    If you need more help setting up CrazyLogin, just ask.
    But i cannot write the web files for you. (Because i don't know how)

    Your config should now look like this:

    database:
      saveType: MYSQL
      saveOnShutdown: false
      MYSQL:
        connection:
          host: yourHostHere
          port: '3306'
          dbname: yourDatabasenameHere
          user: yourUsernameHere
          password: yourPasswordHere
        tableName: accounts
        cached: true
        columns:
          name: name
          password: password
          ips: ips
          lastAction: lastAction
        static: false
    encryptor:
      name: WebCrypt
      encryptURL: www.example.com/dummy.txt
      matchURL: www.example.com/weblogin.php?player=$0$&password=$1$
    


  • Avatar of Nightiky Nightiky May 16, 2013 at 18:47 UTC - 0 likes

    Is there anyway to hook up CrazyLogin with Xenforo database? Problem is that Xenforo uses 2 separate tables - one for username and one for login. Also I didnt find support for Xenforo password algorithm.

    Thanks!

  • Avatar of ogurek90 ogurek90 May 16, 2013 at 11:50 UTC - 0 likes

    Hello TheOneMadHawk. im in urgent need to convert my database passwords saved in crazyhash to md5, because i need to synchronise it with some web apps, could You give some advice on how to convert these data from Your format back to good old md5?

  • Avatar of TheOneMadHawk TheOneMadHawk May 15, 2013 at 20:18 UTC - 0 likes

    @Zachary_DuBois: Go

    Please send me your server log before CrazyLogin holds the server up (if possible including the crash/kill itself)
    Which version ? Does this happen with a newer/older version too?
    i need a copy of your config + a list of installed plugins to help you.

    Sure that this is caused by CrazyLogin?
    I expirienced the same issue with Playerstats (5 minutes start/shutdown time) recently.

    Last edited May 15, 2013 by TheOneMadHawk

Facts

Date created
Mar 25, 2012
Categories
Last update
May 20, 2013
Development stage
Release
Language
  • deDE
  • enUS
License
GNU General Public License version 3 (GPLv3)
Curse link
CrazyLogin
Downloads
59,249
Recent files

Authors

Relationships

Required dependency
CrazyCore