Inactive [SEC] xAuth v2.0.10 - Extra Authentication [1.2.5-R1.3+]

xAuth v2.0.10 - (CraftBukkit build: [1.2.5-R1.3+])
Download v2.0.10

lycano is taking over the development of xAuth as I no longer have the time nor the will to continue working on it. Please see the BukkitDev page: http://dev.bukkit.org/server-mods/xauth/

Thanks to everyone who has showed support for me and xAuth over the past 17 months. It's been 'fun'. If for any reason you need to contact me, stop by my IRC channel (irc.rizon.net #LoveDespite) or toss me a message at http://love-despite.com/forum. Until we meet again, stay gold. Bang.

------------------------------------------------------------------​

xAuth is a plugin designed with a single task in mind: protect a server and its players while running in offline-mode. The basic idea of this protection is allowing players to register an account based on their player name and a supplied password. When a registered player connects to the server, that player will be prompted to authenticate his or herself by logging in. If and only if a valid password is supplied, they will regain full control of their account until their session expires.

Video Tutorial | Commands & Permissions | Configuration | Messages | Translations | Source | Donate!​

Features

• Before registering/logging in, players cannot:
  • Chat, execute commands, interact with objects (levers, chests, etc.), move, or pickup items.
  • Break or place blocks
  • Receive or give damage, be targeted (followed) by hostile mobs
• Inventory and location protection
• In-depth setting and message configuration
• Persistent login sessions through server restarts
• Player name filter and password complexity configuration
• Kick non-logged in (but registered) players after a configurable amount of time
• Bukkit Permissions support
• Kick or temporarily lockout the IP address of a player who fails to log in after a configurable amount of tries
• Custom, highly secure password hashing
• H2 and MySQL support
• Authentication over URL (AuthURL) allows for connection to forum or website databases

Changelog (click for full changelog)

• Version 2.0.10
  • [Fixed] Exploit to completely bypass login system.
  • [Fixed] xAuth commands not working with Rcon
  • [Fixed] Exploiting login system to avoid fire & drowning damage.
  • [Fixed] NPE caused by player connecting & disconnecting during same server tick.
  • [Fixed] 'Table "SESSIONS" not found' error when a player uses /logout while session length is set to zero.
  • [Fixed] Exploiting location protection after dieing to return to the spot of death.
• Version 2.0.9
  • Added several reverse single session configuration options.
  • Fixed registration.forced: false not working.
  • Updated version check and H2 download links.

xAuth Importer
xAuth Importer is a tool used to import accounts from previous versions of xAuth as well as other authentication plugins. Click here for more information.

 

Got the same problem but i says could not connect to database but im pretty experiensed sql user so i know what im doing Tables fail to create and the server stalls a couple of seconds there after it spits out

Code:

13:51:16 [INFO] [xAuth] Enabling xAuth v2.0
13:51:16 [INFO] [xAuth] Permissions support enabled: PermissionsEx v1.19.1
13:51:37 [SEVERE] [xAuth] Failed to borrow MySQL connection from pool!
com.mysql.jdbc.exceptions.jdbc4.CommunicationsException: Communications link fai
lure
 
The last packet sent successfully to the server was 0 milliseconds ago. The driv
er has not received any packets from the server.
        at sun.reflect.NativeConstructorAccessorImpl.newInstance0(Native Method)
 
        at sun.reflect.NativeConstructorAccessorImpl.newInstance(Unknown Source)
 
        at sun.reflect.DelegatingConstructorAccessorImpl.newInstance(Unknown Sou
rce)
        at java.lang.reflect.Constructor.newInstance(Unknown Source)
        at com.mysql.jdbc.Util.handleNewInstance(Util.java:407)
        at com.mysql.jdbc.SQLError.createCommunicationsException(SQLError.java:1
116)
        at com.mysql.jdbc.MysqlIO.<init>(MysqlIO.java:343)
        at com.mysql.jdbc.ConnectionImpl.coreConnect(ConnectionImpl.java:2334)
        at com.mysql.jdbc.ConnectionImpl.connectOneTryOnly(ConnectionImpl.java:2
371)
        at com.mysql.jdbc.ConnectionImpl.createNewIO(ConnectionImpl.java:2163)
        at com.mysql.jdbc.ConnectionImpl.<init>(ConnectionImpl.java:794)
        at com.mysql.jdbc.JDBC4Connection.<init>(JDBC4Connection.java:47)
        at sun.reflect.NativeConstructorAccessorImpl.newInstance0(Native Method)
 
        at sun.reflect.NativeConstructorAccessorImpl.newInstance(Unknown Source)
 
        at sun.reflect.DelegatingConstructorAccessorImpl.newInstance(Unknown Sou
rce)
        at java.lang.reflect.Constructor.newInstance(Unknown Source)
        at com.mysql.jdbc.Util.handleNewInstance(Util.java:407)
        at com.mysql.jdbc.ConnectionImpl.getInstance(ConnectionImpl.java:378)
        at com.mysql.jdbc.NonRegisteringDriver.connect(NonRegisteringDriver.java
:305)
        at java.sql.DriverManager.getConnection(Unknown Source)
        at java.sql.DriverManager.getConnection(Unknown Source)
        at com.cypherx.xauth.database.ConnectionPool.leaseConn(ConnectionPool.ja
va:43)
        at com.cypherx.xauth.database.DatabaseController.getConnection(DatabaseC
ontroller.java:74)
        at com.cypherx.xauth.database.DatabaseController.isConnectable(DatabaseC
ontroller.java:63)
        at com.cypherx.xauth.xAuth.onEnable(xAuth.java:58)
        at org.bukkit.plugin.java.JavaPlugin.setEnabled(JavaPlugin.java:215)
        at org.bukkit.plugin.java.JavaPluginLoader.enablePlugin(JavaPluginLoader
.java:336)
        at org.bukkit.plugin.SimplePluginManager.enablePlugin(SimplePluginManage
r.java:363)
        at org.bukkit.craftbukkit.CraftServer.loadPlugin(CraftServer.java:250)
        at org.bukkit.craftbukkit.CraftServer.enablePlugins(CraftServer.java:232
)
        at net.minecraft.server.MinecraftServer.t(MinecraftServer.java:374)
        at net.minecraft.server.MinecraftServer.a(MinecraftServer.java:361)
        at net.minecraft.server.MinecraftServer.init(MinecraftServer.java:187)
        at net.minecraft.server.MinecraftServer.run(MinecraftServer.java:425)
        at net.minecraft.server.ThreadServerApplication.run(SourceFile:490)
Caused by: java.net.ConnectException: Connection timed out: connect
        at java.net.PlainSocketImpl.socketConnect(Native Method)
        at java.net.PlainSocketImpl.doConnect(Unknown Source)
        at java.net.PlainSocketImpl.connectToAddress(Unknown Source)
        at java.net.PlainSocketImpl.connect(Unknown Source)
        at java.net.SocksSocketImpl.connect(Unknown Source)
        at java.net.Socket.connect(Unknown Source)
        at java.net.Socket.connect(Unknown Source)
        at java.net.Socket.<init>(Unknown Source)
        at java.net.Socket.<init>(Unknown Source)
        at com.mysql.jdbc.StandardSocketFactory.connect(StandardSocketFactory.ja
va:254)
        at com.mysql.jdbc.MysqlIO.<init>(MysqlIO.java:292)
        ... 28 more

 

I need a local database...
Pls add it i like your plugin so much.. but without a local database i dont need it anymore..

 

CypherX: To satisfy the numerous whiners in your thread, it may be to your benefit to allow an option for SQLite. They share the same queries, so... If you want me to send a pull req with the support, I can do that for you?

Why not MySQL?

This was also stated numerous times - this can be exploited, and as a result, has been removed.

If you don't need it anymore then why are you pestering...?

on a side note
If you're running a Bukkit server that needs this plugin, I'm assuming that this isn't a server between two friends or something. Running a server (in general) takes skill. If you're whining or using Windows, then all I have for you is pokerface :|

 

I mean "i need a local database" and i mean "i dont need it at this time" but with a local database its my favourite plugin over all!

 

ah, ok. that makes more sense.

 

I hope he will add a local database..
I haven't found any other plugin with it.

 

U can make easy own database with xampp

 

nice job

 

First thanks to CypherX a lot for this great plugin
I had some problems with the "locations" : xAuth don't create it.

If you have this kind of error:

Code:

Table 'xauth.locations doesn't exist

you can import this table : http://www.terafiles.net/v-129031.html

EDIT : In fact got errors while using it...

 

Ok, becouse I stopped the server and hundreds players are waiting for start it again on new version, this plugin doesn't work.

It doesn't create new tables, but OK, I made it manual.

The problem now is that xAuthImporter says: Properties file missing!

WTF, is not missing. The file is there... and I did all changed.

And now what? How much time my server will be offline?

Edit: Ok, the importer works. I imported my data but the plugin still doesn't work...
When I try to /login , I get "Something went wrong while logging you in"
Except that I get many errors in my console.

What I have to do now?


Error:

 

Not exactly, the AuthURL feature points to a webpage to make the login (it expects a ERROR or a YES message) sending also the user and password in post format to the URL, it dosen't uses the forum database. But xAuth stills uses the database to make other things (like hide inventory and count login attempts).

 

robxu9 - It's true that most queries will work in both MySQL and SQLite, but certain features present in MySQL (such as column positioning in an ALTER TABLE ADD COLUMN statement) are lacking in SQLite making it irritating to support multiple database management systems. MySQL is also much more efficient and easier to maintain, hence why I only included support for it. I guess since 99% of this "community" are illiterate idiots, I'll attempt to add SQLite support without having to completely redesign my code.

Hint hint, MySQL can be installed locally.

schael - xAuth does create it if you set it up correctly. Also, have fun getting more errors because you didn't execute the update query.

 

Posted a bug: https://github.com/CypherX/xAuth/issues/59

 

You don't need to post that here and PM me.. I get an email every time a new issue is opened.

 

Umm do you NEED to have a database for 1.2?

 

okay, sorry.

 

I am new at databases. and MySQL

 

Hello everyone!
Does this new version of Xauth support h2? Well first of all my question is; is "h2" a file or something? I am not familiar with mysql, therefor I do not want to use it. Although I would if the new update required it (because I love/need this plugin). If I do need to switch mysql, how do I convert my h2 file?
Thanks for the help!

 

I see. Hm... Would H2 be better then, in MySQL compatibility mode?
/me wonders if there is a solution to the whining problem without giving you more work...

 

Played with SQLite a bit, it's garbage. Going to mess with H2 again and see how it works.

 

Oh guys... CypherX has done such a great work!!!

And what are you doing? You are behaving like idiots. If you set up a server, then you have to know something about the basics. And if you set up a bigger server (so you need xAuth), then you have to know more than only the basics.
MySQL IS basic knowledge. And if you don't have this knowledge, then use Google and your mind, READ (!) and install MySQL. If you don't know how to set up MySQL and how to set up this plugin with MySQL, then PLEASE don't use this plugin. Come back if you know the basics. But PLEASE don't ask dumb questions!

CypherX: Thank you for your work! And don't be annoyed with "dumb community guys"! You are doing a great work!

 

I would think this is a good plugin but the reason I don't is because it isn't working for me!

 

CypherX - I didn't created this table myself, I used the old one. Then I renamed my other old xAuth tables, removed the DBVERSION file and started xAuth once before using the update soft you made.
And It seems to works great...

EDIT : No, you're right, It's not... Sorry.

 

how to create a MySQL database for xAuth to use please.

 

This doesn't work, when i add it, it just shows the commands list when i try to type a command. And plus it doesn't ask any users for their password like the old xAuth

 

Can xAuth be made available for flatfile again? I do not want to start an SQL server in order to use this mod.
P.S.: Great mod, it makes running my server much easier.

 

I guess all of you illiterates who fail to follow a five minute guide will be happy to know that I've re-added H2 support and an update will be out once I make the library auto-download and create an importer.

 

If they keep whining, do I have permission to beat them with this stick?

 

robxu9 - Yes, please do.

 

I personally would prefer this + over , but that's just my opinion.

BTW; I like this plugin soooo much I am sitting by my computer refreshing the page.