[INACTIVE][SEC] AnjoSecurity v1.6c - Offline-Mode User Registration [440-531+]

AnjoSecurity - Offline-Mode User Registration System
Version: v1.6c

This version it's just a minor update to make it work with newer CB and GM. When GM gets it's final version I'll start working on future plans for this.

---

This plugin uses GroupManager plugin(optional, but recommended if you want to block commands):
http://forums.bukkit.org/threads/ad...0-7-because-permissions-is-past-326-353.4723/
With this you can block all commands of plugins that uses Permissions plugin.

This plugin is to help people prevent griefing and abusing while your server is in offline-mode. When mineceraft server is down you have no choice than setting up offline-mode. When this option is enabled anyone can connect within your server with their desired username, it brings up the problem that someone can connect with administrator name and abuse with all his loot and commands. This plugin will set up user registration with a custom password for your server, and only the person with that password will be able to use that username.

Did I say it is open-source? You can get it on GitHub and modify as you want.

Features:

• Prevents registered users to do anything while not logged in.
• (toggle-able)Prevents non-registered users to do actions(move,destroy,etc).
• (toggle-able)Prevents non-registered users to do summon commands.
• (toggle-able)Remove all loot of non-registered users when joining the server(and tp to spawn).
• (toggle-able)Registration system. You can deactivate registrations anytime.
• Every user can remove their registration, so they can register with other password.
• Users listed on settings.properties, while logged in, can remove any user registration.
• (configurable) Session time. You can set the session duration, so if a user drops connection a lot, he would not need to /login again.(default 30 minutes)
• Interacts with GroupManager permission plugin(the one replacing Nijikokun's Permissions plugin, yet fully compatible) to prevent running registered commands.
• ALLOW List. You can allow certain users to register, even if registration is deactivated.

Commands (all of them speech for themselves):

• /register <password> - it registers with the given password
• /login <password> - it tries to login with the given password
• /reset <password> - if the password is correct, remove registration
• /adminreset <username> - remove the registration of the given username
• /toggleregistration - (yes it is long, in purpose) - toggle registration mode ON/OFF.
• /adminallow <username> - allow user to register even if registration is deactivated.

Changelog:
Version 1.6c

• Made it work with newer CB builds.
• Made it work with GroupManager 1.0 alpha

Version 1.6b

• Made it work with newer GM builds.

Version 1.6

• Fixed a nasty bug.

Version 1.5

• Fixed die-menu-respawn item duping(I think).

Version 1.4

• Compatible with the latest bukkit builds(#353)

Version 1.3b

• Removed some debugging messages.

Version 1.3

• Fixed small bugs. (I think all exceptions reported by now are fixed)
• Added allow list.

Version 1.2

• Fixed small bugs
• Improved how God Mode works(now it's verly like the God Mode plugin)
• Added a God Mode timout after login of 5 seconds, to prevent die of falling on the ground.
• Added a command to toggle registrations on/off.

Version 1.1

• Prevent non-logged-in users to lose health(and die).

Version 1.0

• First fully working release.

Future plans:

• (done!) Create a toggle command that opens and closes registration
• Store users activities, such as typing wrong passwords and such(to catch hackers)

Download:
Version 1.6c (to use with GroupManager 1.0 or higher):
http://www.mdn.fm/files/272681_rqyw0/AnjoSecurity-1.6c.zip

Version 1.6b (to use with GroupManager 0.99b or lower):
http://www.mdn.fm/files/271609_dvt1f/AnjoSecurity-1.6b.zip

Source:
https://github.com/gmcouto/AnjoSecurity

Flat-file Authentication importer(import auth db from older plugins):
http://www.mdn.fm/files/261879_yjodh/uber-AnjoSecurityImporter-1.0-SNAPSHOT.jar
It is destinated for the following format(plugins that used MineSecurity format, from hMod):
username:md5passhash

Just double click on the jar(or run via terminal with java -jar), select the old flat-file... it will generate a AnjoSecurityDB.db file, which you put on your server folder. If you want to merge the old file with the new database, just put the jar on the same folder of the AnjoSecurityDB.db...


===============================
Everyone with an Off-Line server might like the NameChecker plugin I made, it super simple. It only filters huge names (> 20 chars), short names(<3 chars), and invalid characters in names(only letters, numbers, and underscores allowed).
It kicks the player and shows him the reason of why his name is invalid. It even has a configurable file for you to put forbidden names to join the server(like Player, or Scruffy_Puppy)
http://www.mdn.fm/files/273443_hynys/NameChecker-0.1-SNAPSHOT.jar

 

What permissions are needed to use admin commands (/adminreset)?

I'm op and have * permissions, but i still get "You are not allowed to use this command"

EDIT: forget, i found that i need to do that in config.

 

There is problem, when player ent

Code:

2011-02-25 23:18:20 [INFO] 1, 0
2011-02-25 23:18:20 [INFO] visagalis used a portal and generated an exit portal.
2011-02-25 23:18:20 [SEVERE] java.lang.IllegalStateException: Failed to remove player. net.minecraft.server.EntityPlayer@6fe isn't in chunk -10, -3
2011-02-25 23:18:20 [SEVERE]    at net.minecraft.server.PlayerInstance.b(PlayerInstance.java:49)
2011-02-25 23:18:20 [SEVERE]    at net.minecraft.server.PlayerManager.b(PlayerManager.java:101)
2011-02-25 23:18:20 [SEVERE]    at org.bukkit.craftbukkit.entity.CraftPlayer.teleportTo(CraftPlayer.java:149)
2011-02-25 23:18:20 [SEVERE]    at org.anjocaido.anjosecurity.AnjoSecurityPlayerListener.onPlayerMove(AnjoSecurityPlayerListener.java:80)
2011-02-25 23:18:20 [SEVERE]    at org.bukkit.plugin.java.JavaPluginLoader$8.execute(JavaPluginLoader.java:165)
2011-02-25 23:18:20 [SEVERE]    at org.bukkit.plugin.RegisteredListener.callEvent(RegisteredListener.java:59)
2011-02-25 23:18:20 [SEVERE]    at org.bukkit.plugin.SimplePluginManager.callEvent(SimplePluginManager.java:225)
2011-02-25 23:18:20 [SEVERE]    at net.minecraft.server.NetServerHandler.a(NetServerHandler.java:115)
2011-02-25 23:18:20 [SEVERE]    at net.minecraft.server.Packet10Flying.a(SourceFile:126)
2011-02-25 23:18:21 [SEVERE]    at net.minecraft.server.NetworkManager.a(SourceFile:230)
2011-02-25 23:18:21 [SEVERE]    at net.minecraft.server.NetServerHandler.a(NetServerHandler.java:70)
2011-02-25 23:18:21 [SEVERE]    at net.minecraft.server.NetworkListenThread.a(SourceFile:100)
2011-02-25 23:18:21 [SEVERE]    at net.minecraft.server.MinecraftServer.h(MinecraftServer.java:338)
2011-02-25 23:18:21 [SEVERE]    at net.minecraft.server.MinecraftServer.run(MinecraftServer.java:253)
2011-02-25 23:18:21 [SEVERE]    at net.minecraft.server.ThreadServerApplication.run(SourceFile:366)
2011-02-25 23:18:21 [SEVERE] java.lang.IllegalStateException: Failed to remove player. net.minecraft.server.EntityPlayer@6fe isn't in chunk -10, -2
2011-02-25 23:18:21 [SEVERE]    at net.minecraft.server.PlayerInstance.b(PlayerInstance.java:49)
2011-02-25 23:18:21 [SEVERE]    at net.minecraft.server.PlayerManager.b(PlayerManager.java:101)
2011-02-25 23:18:21 [SEVERE]    at org.bukkit.craftbukkit.entity.CraftPlayer.teleportTo(CraftPlayer.java:149)
2011-02-25 23:18:21 [SEVERE]    at org.anjocaido.anjosecurity.AnjoSecurityPlayerListener.onPlayerMove(AnjoSecurityPlayerListener.java:80)
2011-02-25 23:18:21 [SEVERE]    at org.bukkit.plugin.java.JavaPluginLoader$8.execute(JavaPluginLoader.java:165)
2011-02-25 23:18:21 [SEVERE]    at org.bukkit.plugin.RegisteredListener.callEvent(RegisteredListener.java:59)
2011-02-25 23:18:21 [SEVERE]    at org.bukkit.plugin.SimplePluginManager.callEvent(SimplePluginManager.java:225)
2011-02-25 23:18:21 [SEVERE]    at net.minecraft.server.NetServerHandler.a(NetServerHandler.java:115)
2011-02-25 23:18:21 [SEVERE]    at net.minecraft.server.Packet10Flying.a(SourceFile:126)
2011-02-25 23:18:22 [SEVERE]    at net.minecraft.server.NetworkManager.a(SourceFile:230)
2011-02-25 23:18:22 [SEVERE]    at net.minecraft.server.NetServerHandler.a(NetServerHandler.java:70)
2011-02-25 23:18:22 [SEVERE]    at net.minecraft.server.NetworkListenThread.a(SourceFile:100)
2011-02-25 23:18:22 [SEVERE]    at net.minecraft.server.MinecraftServer.h(MinecraftServer.java:338)
2011-02-25 23:18:22 [SEVERE]    at net.minecraft.server.MinecraftServer.run(MinecraftServer.java:253)
2011-02-25 23:18:22 [SEVERE]    at net.minecraft.server.ThreadServerApplication.run(SourceFile:366)

ers nether portal, server freezes.

 

ok... i want when someone joins my server, they cant move or talk until they register, how can i do that?

 

im confused on some of the lines in the config.yml =|... can u please outline what each line does in your next update ^.^?
for now, how do i disable characters inventories from 'resetting' if they aren't registered =0?

 

Please fix the long constructor error 'cause AnjoSecurity isn't working anymore

 

I'

I'd love that to!

 

[SEVERE] Could not load plugins/AnjoSecurity.jar in plugins: null
org.bukkit.plugin.InvalidPluginException
at org.bukkit.plugin.java.JavaPluginLoader.loadPlugin(JavaPluginLoader.java:80)
at org.bukkit.plugin.SimplePluginManager.loadPlugin(SimplePluginManager.java:129)
at org.bukkit.plugin.SimplePluginManager.loadPlugins(SimplePluginManager.java:94)
at org.bukkit.craftbukkit.CraftServer.loadPlugins(CraftServer.java:59)
at net.minecraft.server.MinecraftServer.e(MinecraftServer.java:204)
at net.minecraft.server.MinecraftServer.a(MinecraftServer.java:191)
at net.minecraft.server.MinecraftServer.d(MinecraftServer.java:131)
at net.minecraft.server.MinecraftServer.run(MinecraftServer.java:246)
at net.minecraft.server.ThreadServerApplication.run(SourceFile:366)
Caused by: java.lang.NoSuchMethodException: org.anjocaido.anjosecurity.AnjoSecurity.<init>()
at java.lang.Class.getConstructor0(Class.java:2706)
at java.lang.Class.getConstructor(Class.java:1657)
at org.bukkit.plugin.java.JavaPluginLoader.loadPlugin(JavaPluginLoader.java:75)
... 8 more

Just updated to 452 and not working.
Are you gonna update it?

 

Yes please, update would be very nice. I love this plugin.

 

Its the long contructor thingy.
Anyway, you shouldnt be using bukkit 452 yet, thats why the recomended builds exist. 440 is the current one.

 

@anon your right I just thought I should do a full update to the server cause its been a while since I didn't

is it working on 440 ?

 

Here is version 1.3 (last version on his GitHub) fix for working with last CB build
http://androw.free.fr/AnjoSecurity.jar

Don't know if everything work fine, let me know.

Source at https://github.com/androw/AnjoSecurity/

 

1.3 ?
He's already on 1.6.
I dont understand what you mean with that @Androw

 

On his repositorie, the last commit was labeled as version 1.3.
So I take this one to make the patch

 

OH thks ! I tried right now and it seems to be workign !
Thks man =)

 

i need this to stop resetting inventories
is there a setting?

 

Non registered players (players who aren't listed in the database) can still move arround, destroy things and get stuff on their inventories.

 

Yep it is the normal behavior, I think

 

config.yml
opt:
session:
minutes: 30
guests:
summoncommands: false
resetatlogin: true
lockdown: true

 

Fix for last build (456)
http://androw.free.fr/AnjoSecurity.jar

Don't know if everything work fine, let me know.

Source at https://github.com/androw/AnjoSecurity/

 

feature suggestion:
Make it check against a remote mysql database that can only be accessed directly via local host.

I have a forum associated with my server and would like to check against my registered users. so no register, just login. But the mysql server is not directly accessible from the outside.

 

Ok, maybe I'm missing something here, how the heck do you log in to the server with the username you normally use? When I try to login it thinks my name is 'Player'

 

Is there a way to set the allowlist as a list of usernames, to act as a sort of whitelist?

 

Any confirmation of this working?

 

Yes, it works.

 

Where do i find/place the sqllite connector?

 

Its build in I think, u dont need an external one. At least thats what anjo said to me some time ago on the first release of this.

 

downgraded back to 452 now the error is different.
upgraded to 456 and it stays the same...

no longer it cant find sql connectors

now its:

Show Spoiler Hide Spoiler

Code:

02:43:42 [SEVERE] Could not load plugins\AnjoSecurity.jar in plugins: null
org.bukkit.plugin.InvalidPluginException
        at org.bukkit.plugin.java.JavaPluginLoader.loadPlugin(JavaPluginLoader.java:80)
        at org.bukkit.plugin.SimplePluginManager.loadPlugin(SimplePluginManager.java:129)
        at org.bukkit.plugin.SimplePluginManager.loadPlugins(SimplePluginManager.java:94)
        at org.bukkit.craftbukkit.CraftServer.loadPlugins(CraftServer.java:59)
        at net.minecraft.server.MinecraftServer.e(MinecraftServer.java:204)
        at net.minecraft.server.MinecraftServer.a(MinecraftServer.java:191)
        at net.minecraft.server.MinecraftServer.d(MinecraftServer.java:131)
        at net.minecraft.server.MinecraftServer.run(MinecraftServer.java:246)
        at net.minecraft.server.ThreadServerApplication.run(SourceFile:366)
Caused by: java.lang.NoSuchMethodException: org.anjocaido.anjosecurity.AnjoSecurity.<init>()
        at java.lang.Class.getConstructor0(Unknown Source)
        at java.lang.Class.getConstructor(Unknown Source)
        at org.bukkit.plugin.java.JavaPluginLoader.loadPlugin(JavaPluginLoader.java:75)
        ... 8 more

 

running 437 i get

Code:

java.sql.SQLException: No suitable driver found for jdbc:sqlite:AnjoSecurityDB.db
    at java.sql.DriverManager.getConnection(DriverManager.java:640)
    at java.sql.DriverManager.getConnection(DriverManager.java:222)
    at org.anjocaido.anjosecurity.RegistrationControl.<init>(RegistrationControl.java:41)
    at org.anjocaido.anjosecurity.AnjoSecurity.onEnable(AnjoSecurity.java:108)
    at org.bukkit.plugin.java.JavaPlugin.setEnabled(JavaPlugin.java:140)
    at org.bukkit.plugin.java.JavaPluginLoader.enablePlugin(JavaPluginLoader.java:426)
    at org.bukkit.plugin.SimplePluginManager.enablePlugin(SimplePluginManager.java:187)
    at org.bukkit.craftbukkit.CraftServer.loadPlugin(CraftServer.java:79)
    at org.bukkit.craftbukkit.CraftServer.loadPlugins(CraftServer.java:60)
    at net.minecraft.server.MinecraftServer.e(MinecraftServer.java:187)
    at net.minecraft.server.MinecraftServer.a(MinecraftServer.java:174)
    at net.minecraft.server.MinecraftServer.d(MinecraftServer.java:120)
    at net.minecraft.server.MinecraftServer.run(MinecraftServer.java:227)
    at net.minecraft.server.ThreadServerApplication.run(SourceFile:366)

 

Dont know if someone has said this already, but...

If you have this plugin, you are at greak risk as if someone comes in in offline mode as an admin or op or mod's name, the they CAN execute commands and seriously screwup your server! Leave your server on online mode till a fix disalows this.

 

When mc.net is down, having a temporary offline server is tons of fun. If your players are executing commands, then you do NOT have your permissions configured properly OR you either have all your admins in ops.txt or are on one of the builds that makes all players OPs. Using AnjoSecurity with GroupManager and having them properly configured will remove all commands from all players. Players in ops.txt can bypass the restrictions, BUT if you have a properly configured permissions system, there should be very little need to have anyone in ops.txt. I believe there's also been 2 CB builds that have made all players OPs. If you're using #440, you shouldn't have that problem.