Inactive [SEC] xAuth v2.0.10 - Extra Authentication [1.2.5-R1.3+]

Discussion in 'Inactive/Unsupported Plugins' started by CypherX, Mar 15, 2011.

Thread Status:
Not open for further replies.
  1. Offline


    xAuth v2.0.10 - (CraftBukkit build: [1.2.5-R1.3+])
    Download v2.0.10

    lycano is taking over the development of xAuth as I no longer have the time nor the will to continue working on it. Please see the BukkitDev page:

    Thanks to everyone who has showed support for me and xAuth over the past 17 months. It's been 'fun'. If for any reason you need to contact me, stop by my IRC channel ( #LoveDespite) or toss me a message at Until we meet again, stay gold. Bang.


    xAuth is a plugin designed with a single task in mind: protect a server and its players while running in offline-mode. The basic idea of this protection is allowing players to register an account based on their player name and a supplied password. When a registered player connects to the server, that player will be prompted to authenticate his or herself by logging in. If and only if a valid password is supplied, they will regain full control of their account until their session expires.

    • Before registering/logging in, players cannot:
      • Chat, execute commands, interact with objects (levers, chests, etc.), move, or pickup items.
      • Break or place blocks
      • Receive or give damage, be targeted (followed) by hostile mobs
    • Inventory and location protection
    • In-depth setting and message configuration
    • Persistent login sessions through server restarts
    • Player name filter and password complexity configuration
    • Kick non-logged in (but registered) players after a configurable amount of time
    • Bukkit Permissions support
    • Kick or temporarily lockout the IP address of a player who fails to log in after a configurable amount of tries
    • Custom, highly secure password hashing
    • H2 and MySQL support
    • Authentication over URL (AuthURL) allows for connection to forum or website databases
    Changelog (click for full changelog)
    • Version 2.0.10
      • [Fixed] Exploit to completely bypass login system.
      • [Fixed] xAuth commands not working with Rcon
      • [Fixed] Exploiting login system to avoid fire & drowning damage.
      • [Fixed] NPE caused by player connecting & disconnecting during same server tick.
      • [Fixed] 'Table "SESSIONS" not found' error when a player uses /logout while session length is set to zero.
      • [Fixed] Exploiting location protection after dieing to return to the spot of death.
    • Version 2.0.9
      • Added several reverse single session configuration options.
      • Fixed registration.forced: false not working.
      • Updated version check and H2 download links.
    xAuth Importer
    xAuth Importer is a tool used to import accounts from previous versions of xAuth as well as other authentication plugins. Click here for more information.
  2. Offline


    Do you have a working 1.2 version of xauth for mc 1.2.3 ? Or didnt i understand it correctly?

    BUT if so... i would like to try that version? :p
  3. Offline


    Hello, pass me the beta version? please?
  4. Offline


    Yes you did! I have one :p, i patched the enchants myself from the last commit for the 1.2.

    You must update you database tables if you want to use it, there is a slight diference, it's explained here:

    (Search my post, that was when i fixed it to work with enchants for R1).

    Here's the 1.2 version, use it at your own risk:

    (I removed all my modifications and left only the enchants fix)
  5. Offline


    Cool im gonna try this out! Thanks.

    It did convert my flatfile passwords to a database. But it didnt convert right i guess cause my password was wrong all times.

    Also it doesnt create a config.
  6. Offline


    Nope it dosen't, you should use your old config file. I never said that you had to convert your faltfile to mysql, the only thing you must do it's add another field for the enchants in the items table!
  7. Offline


    So if I already did the enchantments patch (added a new table to the h2 database), then replacing this with the old xAuth should fix things for 1.2?
  8. Offline


    how can I patch the existing mysql-Database?
    Anyone who can help me with this?
  9. Offline


    It's not a new table, its a new field in a existing table (follow the steps in the first link). If you were using any of the fixed versions of xAuth for 1.0 to manange enchants this update should work for you with any further problems.

    Well, i really dont know! This it's barely tested cause it was only for me, but if when you say "then replacing this with the old xAuth should fix things for 1.2" you refer to "not giving any errors in startup and seems to work right when used", then yes, or at least it works for me.

    Be carefull, backup all the things first and test it.

    What do you mean with "patch the existing mysql-Database" ?

    EDIT by Moderator: merged posts, please use the edit button instead of double posting.
    Last edited by a moderator: Jul 17, 2016
  10. Offline


    This is the way my auths.txt file looks like. What should i change about it?

  11. Offline


    Err, that's not something related to xAuth, you were using xAuth before or another plugin?
  12. Offline


    Okay yeah I did the thing were I opened the database with RazorSQL and fixed enchantments. I'll have to try this out.
  13. Offline


    Great! Good luck then, hope it works :D, let me know how it goes.
  14. Offline


    hi Robert Can you send the whole plugin modified by you
  15. Offline


    auths.txt is from xAuth v1.0 through xAuth v1.2.5.
  16. Offline


    dont write, work! :D (just kidding I love you)
  17. Offline


    so how to do it ???
  18. Offline


    Thanks for giving us the link to show us your status on the project :3
    We now know not to ask you to add admin commands to the plugin ;P
  19. Offline


    as for when will be for version 1.2.3:)
  20. Offline


    I just downloaded the test version shown up there ^^. I was wondering, is there anything that is required to use my old database, or can I just use it? Don't want to screw up my stuff.
    Thanks for updating this by the way, saved my server <:
    If so, I'm no good at MySQL stuff, so if anyone is willing to, I'll pay $5 on PayPal for someone to update it via TeamViewer for me.
  21. Offline


    Interesting... i didn't know that :3. Thanks! Hope you don't mind im sharing the old-fixed version, it's for those in a hurry.

    You should update to the 1.8 compatible version first then, so it makes your conversion.

    It was in my previous post:

  22. Offline


  23. Offline


    Where can i get that 1.8 compatible version? :p
  24. Offline


    It works like a charm on my server,
    I have just 1 small problem.
    When someone registers or logs in and he isnt trusted yet,
    The somehow teleport outside of the spawn.
    Due to this we are getting more griefs since there are coming more and more hacks online.
    Is there a way to stop them from teleporting outside the spawn?
  25. CypherX
    Ok... can you add a VERY SIMPLE command to see whether the player is registered or not? :3
  26. Offline


    I got it working, why do you say that isn't working?

    There you go:

    Plase avoid pasting console stuff like that in the forums, it's usless. Use pastebin or at least put in a quote inside a spoiler tag.

    As i can see it's throwing you MYSQL errors, thats because you didn't implement the fix or you are trying to install this from zero. The version i posted it's just a fix, and it's barely tested, so it probably don't work intalling it from zero.

    EDIT by Moderator: merged posts, please use the edit button instead of double posting.
    Last edited by a moderator: Jul 17, 2016
  27. Offline


    i done all points now but i have problem with register in the game
  28. Offline


    That's for people using H2 database, do you have the h2 files? Paste the config file of xauth pelase.
  29. Offline


    it showing me 'u are already registered' when i trying to move showing another information 'u have to be logged to do this' and i cant log in because it displayed 'u are already logged' hmn
  30. Offline


    This is what i got after doing the fix and starting the new events xauth in 1.2.3 :

    2012-03-08 21:33:36 [INFO] [xAuth] Enabling xAuth v2.0b4.3
    2012-03-08 21:33:37 [INFO] [xAuth] Connection to database established!
    2012-03-08 21:33:37 [INFO] [xAuth] Updating database..
    2012-03-08 21:33:37 [SEVERE] [xAuth] SQL query failure [write] (ALTER TABLE `strikes` DROP COLUMN IF EXISTS `host`)
    org.h2.jdbc.JdbcSQLException: Column "IF" not found; SQL statement:
    ALTER TABLE `strikes` DROP COLUMN IF EXISTS `host` [42122-153]
        at org.h2.message.DbException.getJdbcSQLException(
        at org.h2.message.DbException.get(
        at org.h2.message.DbException.get(
        at org.h2.table.Table.getColumn(
        at org.h2.command.Parser.parseAlterTable(
        at org.h2.command.Parser.parseAlter(
        at org.h2.command.Parser.parsePrepared(
        at org.h2.command.Parser.parse(
        at org.h2.command.Parser.parse(
        at org.h2.command.Parser.prepare(
        at org.h2.command.Parser.prepareCommand(
        at org.h2.engine.Session.prepareLocal(
        at org.h2.engine.Session.prepareCommand(
        at org.h2.jdbc.JdbcConnection.prepareCommand(
        at org.h2.jdbc.JdbcPreparedStatement.<init>(
        at org.h2.jdbc.JdbcConnection.prepareStatement(
        at com.cypherx.xauth.database.Database.queryWrite(
        at com.cypherx.xauth.database.DbUpdate.update(
        at com.cypherx.xauth.database.DbUpdate.update(
        at com.cypherx.xauth.xAuth.onEnable(
        at org.bukkit.plugin.SimplePluginManager.enablePlugin(
        at org.bukkit.craftbukkit.CraftServer.loadPlugin(
        at org.bukkit.craftbukkit.CraftServer.enablePlugins(
        at net.minecraft.server.MinecraftServer.t(
        at net.minecraft.server.MinecraftServer.a(
        at net.minecraft.server.MinecraftServer.init(
    2012-03-08 21:33:37 [SEVERE] [xAuth] Database update (3 -> 4) failed!
    2012-03-08 21:33:37 [INFO] [xAuth] Disabling xAuth v2.0b4.3
    2012-03-08 21:33:37 [INFO] [xAuth] v2.0b4.3 Disabled!
  31. Offline


    no pressure but why is the update taking so long?
Thread Status:
Not open for further replies.

Share This Page