What is this?!?!?!?1

So some players are automatically oping themselves, how do i stop this

 

well based on your sig I would say you have a permissions system in place, after making sure that not allowing the command in question I would make sure you are not running in offline mode

 

What do you mean?

 

Dont give access to the command with the permissions nodes and make sure you run the server in online mode.

 

Honestly, I think Notch should just remove the online-mode=false option. There is just too many people that disable it and have a 'cracked' server then derp about the issues on here.

 

Naw these are my server props. NOTE: I asked others to do /op but it didnt work, so the others must of been hackers.

#Minecraft server properties
#Fri Apr 13 06:03:30 CEST 2012
settings.spawn-radius=30
allow-nether=true
level-name=world
enable-query=true
allow-flight=false
server-port=25613
query.port=<removed from here>
level-type=DEFAULT
minequery-port=<removed from here>
enable-rcon=false
hellworld=false
level-seed=
server-ip=<Removed from here>
max-build-height=256
spawn-npcs=true
white-list=false
debug=false
plugins=
spawn-animals=true
online-mode=true
pvp=true
difficulty=1
server-name=Raidcraft
gamemode=0
max-players=200
spawn-monsters=true
generate-structures=true
view-distance=10
motd=ragecraftpvp.com

 

You do not get ¨hackers¨ unless you do something stupidly insecure.

Post your permissions YML files please (upload to pastebin.com, set the privacy setting to Unlisted and give us the links in this topic)

 

trust me, my permissions are okay, if they weren't would like everyone in the server be going op?

 

However such a feature lets you play minecraft without an internet connection on a long train journey in an ad-hoc network (As I know from going to meetings with work colleagues)

Give us your permissions YML so we can check it, there seems to be a problem if what you are saying is true.

Also check your ops.txt file

 

I checked my ops.txt files, removed his name and permissions.yml is empty because i use groupmanager.

 

Hi, please read: http://dev.bukkit.org/server-mods/nocheat/#c958

It will explain in detail how attackers are able to OP themselves by abusing minecrafts broken authentication system. If you ever played on another server that you don't fully trust (maybe you even just tried to log into one and it said "server full" or similar), then you were probably attacked that way.

 

Make sure you stop your server before editing ops.txt

Do you have any permissions files at all? Ones for each world? If you have a problem, we can help you if you give us something to work from.

Have you had people coming onto your server asking you to join theirs and 'check it works' ? I've had people coming onto mine recently doing that and banned them on sight.

 

Yea, someone asked me to join their server so did that cause it?

I already use it , love it

EDIT by Moderator: merged posts, please use the edit button instead of double posting.

 

Possibly, I can only speculate as I personally have no idea how these authentication exploits work.