A guy opped himself on my server when he only has been on for less then a minute.

Discussion in 'Bukkit Help' started by Shadow12assassin, Jan 28, 2013.

Thread Status:
Not open for further replies.
  1. A guy wen ton my server, deoped me, opped himself. He said he made permissions plugin. I checked my plugin and he somehow got ALL the permssions. Hes a new person. Mohhumadhell was his user. How did he do it?
     
  2. Offline

    TnT

    Do you have online-mode=true set?
     
    Codex Arcanum and MayoDwarf like this.
  3. Offline

    MayoDwarf

    Yah did you? Also logs maybe showing him when this event happened please.
     
  4. Offline

    Charlesdark221

    o-o he was probably a hacker o-oo-o-o-o-o-o
     
  5. Offline

    Iaccidentally

    There is no forceop with online-mode=true. none.
     
  6. Offline

    LiLChris

    There is a new mediafire link, they are spreading it on my server like crazy.
    Had to keep /socialspy on for a week now and ban those that post that fake thing.

    Wonder where this BS started this time, its almost as bad as the "I am from PMC...."
     
  7. Offline

    Iaccidentally

    Solution: only get plugins from dev.bukkit.org. We check every single file.
     
  8. Offline

    LiLChris

    Think you misread, that isn't a plugin. :confused:

    It's a wanna be Forceop.exe, which is what I can only assume the thread starter downloaded.
    (or offline/bad plugin)
     
  9. Bukkitdev staff: I would like to make a quick note. People are spreading a mediafire link around with force op plugins on them. If only we could make it so plugins had to be verified </3
     
  10. Offline

    tiwar

    Im not sure what you mean? every plugin that is released at bukkit,are checked for bad code.If you download plugins from a shady site,you get these kinds of problems.As stated above.
     
  11. Offline

    CRAZYxMUNK3Y

    tiwar
    Only plugins on BukkitDev. Plugins that are made in the Plugin Requests section are rarely checked, if you want someone to check it you'll have to ask people who can read/write java and are willing to check it.
     
  12. Offline

    tiwar

    yeah of course,if you request a plugin,you have to do what you say,i meant what is released by bukkit developers.what i meant most is,if you download plugins for bukkit,from a diffrent site,then bukkit,you never know what you get.
     
  13. Offline

    MysteryManX

  14. Offline

    stuntguy3000

    MysteryManX likes this.
  15. Offline

    MysteryManX

    You could just use the Report button, no need to tag admins/mods :p
     
  16. Offline

    stuntguy3000

    pft i find its not effective ;~;
     
  17. Offline

    Rawrツ

    That not a good pickup,not everyone have to use their minecraft name to sign up for Bukkit
     
  18. Offline

    bennie3211

    Question, why will this not work for online-mode = true? Why only for online-mode = false?
     
  19. Offline

    Necrodoom

    online mode false = you can log in as anyone, including the admins.
     
  20. Offline

    TnT

    Because online-mode=false is like leaving your door unlocked and wide open, then complaining when you get unwelcome visitors. There is absolutely no security.

    Online-mode=false should only be used for testing purposes and never to run a public server with.

    Locked.
     
Thread Status:
Not open for further replies.

Share This Page