People on my server keep hacking op. Is there a way to remove privilages from op? I really need this. I may pay whoever makes this plugin for me. Thanks!
There is no way to remove privilages from OP. OP is hardcoded into the minecraft server. Also, unless they have permissions through a plugin, access to the console, or you have your op list in a database, there is no way they are hacking OP. You should use a command logging program, as I can almost assure you that someone is opping other people.
hacking OP, the only way to get OP on a server by hacking is if the server is Offline, if its offline then its your fault, tell your mates to get real minecraft or risk your server for your friends, simple as
A random dude came out of no where and banned me from my own server I got him back goooood real good!
Actually, hackers have now found some kind of way to "steal someone's login session". Basically they will trick the server and login on someone else's account; for example an op. I believe they can only steal your session if you log on to their modified servers.
Not true. Nobody was op, and when i woke up ppl who didn't have access to the files were op. And haven't u ever heard of FORCE OP? its possible
Harry8550 lemondhead2000 parkourisbeast1 You can't force OP. Unless some one hacked your server and changed the files, hacked your server and changed a DB entry, or your server is in offline mode, it is impossible. Source I prove my point. ItsJerry is correct but that is not OP hacking, that is Phishing.
I could try to do this, ops would still defeat spawn protection but it would disable all the op commands for players but not the server console. But if they are hacking you, I can't be 100% how the hack works so they might be able to bypass it.
If your server is in offline-mode I would suggest either buying the game or finding a password plugin like xAuth
I have xauth and IT HAPPENED AGAIN TODAY!!!! THE THE FIFTH TIME SOMEONE HAS HACKED OP AND TRASHED MY SERVER!!!!! WHY??????
AUTH WONT HELP. YOUR SERVER IS OFFLINE AND CRACKED. MAKE IT ONLINE OR YOUR SERVER WILL GET FUCKED OVER. SIMPLE. GET YOUR MATES TO GET REAL MINECRAFT OR HAVE AN EXTREMELY UNSAFE AND BAD SERVER. some people just dont get it
It could be, if someone discovers a vulnerability in Xauth. It's better to just use online mode. EvilSeph, a lead developer of Bukkit and now a member of the Minecraft development team, has said that if your server is in online mode, force-op hacks are impossible. Offline mode, even with Auth plugins, will never be as secure. Switch to online mode, change your password and get any staff on your server to change theirs. EDIT by Moderator: merged posts, please use the edit button instead of double posting.
I think... I can make it.. I can't block all op privileges but at least I can block people typing /op [player] and /deop [player] I will pm you as soon as I am done with that
Just buy minecraft... seriously, its not expensive... Soz, but... its the truth. Offline mode is not made for production servers, its mainly used for when the Minecraft login servers are down and you want to still play multiplayer, either locally or not public.
They should remove Offline mode, If you cannot afford the game you shouldn't be able to play it. simple.
its kind of easy to stop the hackers just get one of the many plugins that stop hacking so that when someone try's they will be banned
You know this seems half simple? Just someone make a plugin that makes it deop on leave, then you can only be op'd from the console and by people that are on that have been op'd by the console... Simple listeners...
http://wiki.bukkit.org/CraftBukkit_commands Lists commands and the associated permissions in Bukkit. Although more likely ways to fix the issue is as mentioned many times above: online mode. I won't be responding to replies to this thread as it's a waste of time.
HEY YOU GUYS, THIS SEEMS TO BE A SERIOUS ISSUE SO I MADE THIS FOR YOU.jar (It disallows the OP command and also checks for OPs every .5 of a second and deops them)
If you dont want any player to have OP permission a very small plugin could be written to keep any player from having OP. I can think of one fast way to write this plugin. Let me know how badly you want a plugin for this.
I did that, in my earlier post It's called nOPe.jar No the plugin simply throttles the default op command and makes it do nothing, and also makes sure all players are not OP every half second.
