# LoginSystem # A secure player authentication system # Version: 1.0 options: prefix: &6[OrionLoginX]&r # Messages msg-register: &eYou need to register! Use: &a/register msg-login: &eWelcome back! Please login: &a/login msg-register-success: &aRegistration successful! You are now logged in. msg-login-success: &aSuccessfully logged in! Welcome back. msg-already-registered: &cYou are already registered! Use /login msg-already-logged: &cYou are already logged in! msg-not-registered: &cYou need to register first! Use /register msg-wrong-password: &cIncorrect password! Try again. msg-passwords-match: &cPasswords do not match! msg-already-logged-in: &cYou are already logged in! msg-must-login: &cYou must login first! # Security freeze-on-join: true kick-timeout: 60 # seconds before kicking if not logged in # Variables: # {login.password::%uuid of player%} - Stores player password # {login.session::*} - List of currently logged-in players # {login.jointime::%player%} - Timestamp of when player joined (for timeout) # ========================================== # ON JOIN - Freeze and require login # ========================================== on join: if {login.password::%uuid of player%} is set: # Player is registered, require login send "{@prefix} {@msg-login}" to player set {login.jointime::%player%} to now else: # New player, require registration send "{@prefix} {@msg-register}" to player set {login.jointime::%player%} to now # Remove from session list on join (in case of improper disconnect) remove player from {login.session::*} # ========================================== # ON QUIT - Clear session # ========================================== on quit: remove player from {login.session::*} delete {login.jointime::%player%} # ========================================== # REGISTER COMMAND # ========================================== command /register : trigger: # Check if already registered if {login.password::%uuid of player%} is set: send "{@prefix} {@msg-already-registered}" to player stop # Check if already logged in if {login.session::*} contains player: send "{@prefix} {@msg-already-logged}" to player stop # Check if passwords match if arg-1 is not arg-2: send "{@prefix} {@msg-passwords-match}" to player stop # Check password length if length of arg-1 < 4: send "{@prefix} &cPassword must be at least 4 characters long!" to player stop # Register the player set {login.password::%uuid of player%} to arg-1 add player to {login.session::*} delete {login.jointime::%player%} send "{@prefix} {@msg-register-success}" to player # Log registration log "%player% registered an account" to "login/registers.log" # ========================================== # LOGIN COMMAND # ========================================== command /login : trigger: # Check if registered if {login.password::%uuid of player%} is not set: send "{@prefix} {@msg-not-registered}" to player stop # Check if already logged in if {login.session::*} contains player: send "{@prefix} {@msg-already-logged-in}" to player stop # Verify password if {login.password::%uuid of player%} is arg-1: add player to {login.session::*} delete {login.jointime::%player%} send "{@prefix} {@msg-login-success}" to player # Log successful login log "%player% logged in successfully" to "login/logins.log" else: send "{@prefix} {@msg-wrong-password}" to player # Log failed login attempt log "%player% failed login attempt" to "login/failed.log" # ========================================== # CHANGE PASSWORD COMMAND # ========================================== command /changepassword : aliases: /changepass trigger: # Must be logged in if {login.session::*} does not contain player: send "{@prefix} {@msg-must-login}" to player stop # Check if registered if {login.password::%uuid of player%} is not set: send "{@prefix} &cYou are not registered!" to player stop # Verify old password if {login.password::%uuid of player%} is not arg-1: send "{@prefix} &cIncorrect current password!" to player stop # Check if new passwords match if arg-2 is not arg-3: send "{@prefix} {@msg-passwords-match}" to player stop # Check new password length if length of arg-2 < 4: send "{@prefix} &cNew password must be at least 4 characters long!" to player stop # Change password set {login.password::%uuid of player%} to arg-2 send "{@prefix} &aPassword changed successfully!" to player # Log password change log "%player% changed their password" to "login/changes.log" # ========================================== # ADMIN COMMANDS # ========================================== command /loginadmin [] []: permission: login.admin permission message: {@prefix} &cYou don't have permission to use this command! trigger: if arg-1 is not set: send "{@prefix} &eAdmin Commands:" send "&a/loginadmin reset &7- Reset a player's password" send "&a/loginadmin unregister &7- Unregister a player" send "&a/loginadmin info &7- View player registration info" stop if arg-1 is "reset": if arg-2 is not set: send "{@prefix} &cUsage: /loginadmin reset " to player stop if {login.password::%uuid of arg-2%} is not set: send "{@prefix} &c%arg-2% is not registered!" to player stop delete {login.password::%uuid of arg-2%} remove arg-2 from {login.session::*} send "{@prefix} &aReset %arg-2%'s account. They need to re-register." to player if arg-2 is online: send "{@prefix} &cYour account has been reset by an admin. Please re-register." to arg-2 log "%player% reset %arg-2%'s account" to "login/admin.log" else if arg-1 is "unregister": if arg-2 is not set: send "{@prefix} &cUsage: /loginadmin unregister " to player stop if {login.password::%uuid of arg-2%} is not set: send "{@prefix} &c%arg-2% is not registered!" to player stop delete {login.password::%uuid of arg-2%} remove arg-2 from {login.session::*} send "{@prefix} &aUnregistered %arg-2%." to player if arg-2 is online: kick arg-2 due to "&cYour account has been unregistered by an admin." log "%player% unregistered %arg-2%" to "login/admin.log" else if arg-1 is "info": if arg-2 is not set: send "{@prefix} &cUsage: /loginadmin info " to player stop if {login.password::%uuid of arg-2%} is not set: send "{@prefix} &c%arg-2% is not registered!" to player stop send "{@prefix} &eAccount Info for %arg-2%:" to player send "&7UUID: &f%uuid of arg-2%" to player send "&7Registered: &aYes" to player if {login.session::*} contains arg-2: send "&7Currently Logged In: &aYes" to player else: send "&7Currently Logged In: &cNo" to player else: send "{@prefix} &cUnknown subcommand! Use /loginadmin for help." to player # ========================================== # SECURITY - Prevent actions when not logged in # ========================================== # Prevent movement on any movement: if {login.session::*} does not contain player: if {login.password::%uuid of player%} is set: cancel event # Prevent command usage (except /login and /register) on command: if {login.session::*} does not contain player: if command is not "login" or "register": cancel event send "{@prefix} {@msg-must-login}" to player # Prevent chat on chat: if {login.session::*} does not contain player: cancel event send "{@prefix} {@msg-must-login}" to player # Prevent item interactions on player interact: if {login.session::*} does not contain player: cancel event # Prevent item pickup on pickup: if {login.session::*} does not contain player: cancel event # Prevent item drop on drop: if {login.session::*} does not contain player: cancel event # Prevent damage taken on damage of player: if {login.session::*} does not contain victim: cancel event # Prevent damage given on damage: attacker is a player if {login.session::*} does not contain attacker: cancel event # ========================================== # TIMEOUT SYSTEM - Kick if not logged in after X seconds # ========================================== every 5 seconds: loop all players: if {login.session::*} does not contain loop-player: if {login.jointime::%loop-player%} is set: set {_elapsed} to difference between {login.jointime::%loop-player%} and now if {_elapsed} is greater than {@kick-timeout} seconds: kick loop-player due to "{@prefix}%nl%&cYou took too long to login!%nl%&eTimeout: {@kick-timeout} seconds" delete {login.jointime::%loop-player%} # ========================================== # ON SCRIPT LOAD # ========================================== on script load: send "{@prefix} &aLoginSystem loaded successfully!" to console send "&7Version: 1.0" to console # Clear all sessions on reload (security measure) delete {login.session::*} send "&7Cleared all login sessions." to console