LoginSecurity
LoginSecurity
LoginSecurity is a lightweight password authorization plugin. You can optionally set a password each time you enter the server, adding a double layer of security to your account. The password is stored inside the configuration file, nobody else except the server owner can access or modify it.
How does it work?
Install the pluign to your /plugins/ directory, then start your server.
Type /register <password>, your account is now locked with a password.
For each time you login, make sure to use /login <password>.
Features
- Register your account optional or required (change in config)
- 5 Useful commands to mangage your password
- Advanced administrative control
- Advanced documentation via wiki
- Secure password storage using BCrypt
- Secure sessions storing to improve user experience
- Customizable time-out
- Map captcha upon registration (user friendly)
- Conversion from AuthMe and xAuth (check wiki for more info)
- Premium support through AutoIn
- Automatic update with changelog overview
- Username filtering (length and characters)
- Highly detailed configuration
- Automatically updated translation manager (user-submitted)
- Prevents being kicked by orther players loging in with your name
Session login allows the user to log in right after they logged out and not have to type in their password again. (1 minute time limit of being logged out, stores IP during that time to keep everything safe)
Commands
/lac - Admin command, rmpass and reload
/register <password> - Set your password
/login <password> - Login with your password
/changepass <old> <new> - change your password
/logout - Logout
Permissions
- loginsecurity.admin - allows admin command
- loginsecurity.update - shows update notifications
Video
Thanks to ServerMiner for making this informative tutorial
Orther tutorials: German (by MineCraftler4Live)
Planned
- Add translation interface for easier language selection
- Suggestions?
Known Bugs
- Players can mount/dismount and ride on vehicles while not logged in
Disclaimer
By default, LoginSecurity will check for updates from bukkitdev every 3 hours.
This feature can be disabled by setting "update-checker" to "false"
Anyone with the permission node ls.admin will be notified of updates, and it also able to download them via /lac update.
Which again can be disabled by disabling the update-checker
This plugin utilises Hidendra's plugin metrics system, which means that the following information is collected and sent to mcstats.org:
- A unique identifier
- The server's version of Java
- Whether the server is in offline or online mode
- The plugin's version
- The server's version
- The OS version/name and architecture
- The core count for the CPU
- The number of players online
The Metrics version Opting out of this service can be done by editing plugins/Plugin Metrics/config.yml and changing opt-out to true.
Additionally, when the language setting is changed, information is retrieved from lang.lenis0012.com to aquire up to date translations.
Links
- v3.0.2 - Download (18 - 1.15)
- Source code (GitHub)
- https://github.com/lenis0012/LoginSecurity-2/wiki (Wiki)
- https://github.com/lenis0012/Translations/wiki/Contribute (Translation Contribution)
Donate
If you want to support me working on this project, please donate.
It helps me alot to keep my projects up.
Donate at the top right corner
How can you change the language to de_de? :)
In reply to Forge_User_53559635:
You take the file and translate it, like the others did
In reply to Peppe73:
How can i see other players' paswords, if I go into the database it shows me cripted passwords
In reply to Francy_Dam:
you can't see it if he doesn't remember it he has to change it
Es Bueno el complemento pero me gustaría que los usuarios al registrarse y al logearse aparezcan en el spawn.
how to change msgs?
Turkish Translate gives an Turkish Character error. Please fix it.
How can i make it so that only cracked players have to do /login and not premium players???
Hi in console I get an API update error, when the update comes out for 1.16.xx
Delete items :c
Works on 1.16.1 ♥
You save my life, i love you.
Hello,
Does this plugin work in version 1.16.1?
Thank you in advance for the answer
Hi thanks for this superb plugin, can you update it to 1.16.1?
What about /unregister player command for admins, so if the user forgot password admin can remove it?
This plugin is useful, but needs improvements.
- I changed the language parameter, but the language didn't change.
- When I register, the blidness isn't casted on me. But after I'm registered, I reconnect and I want to log in - it is casted.
- Why can I not unregister? There is no such parameter is the config file.
Recent problems from my testing:(25.05.2020,may be fixed in future)
!!! -If you have enabled the option to restore last session, the inventory will be deleted when you log out and log in(restore session).
Fix: Disable session timeout by setting session-timeout: -1 ;
!!! -You can craft items in the inventory crafting while not being logged in and you can delete 4 items at a time by placing them in the inventory crafting and waiting to be disconnected automatically because you didn't enter a password.
Fix: Disable session timeout(above method) and set hide-inventory: true;
-You can move upwards(fly) while not being logged in if you don't have other plugins that disable flying.This can lead to hackers flying and disconnecting and players will drop to death when relogging.
-If you set max 2 tries for example,you will actually have 3 tries but the 3rd one will always disconnect you no matter you enter the correct password or not. This is not a problem, only to clear some confusion.
hellow.
After rebooting to the server, the inventory is deleted. What to do ? I checked everything and this is because of this plugin
[Server thread/WARN]: /tmp/sqlite-3.30.1-c89ec8df-1845-4aab-b66f-dff46682b152-libsqlitejdbc.so.lck (No such file or directory)
How fix?
Hey guys, I don't read comments on dev.bukkit.org very often, if you encounter any bugs. Please report them at https://github.com/lenis0012/LoginSecurity-2/issues
The dev.bukkit.org version has been outdated for a while, I just uploaded a new version, but it has not yet been approved. It should be on here soon.
Have a good day everyone