search

lenis0012 / LoginSecurity

Lightweight and secure user authentication for Bukkit Minecraft servers
https://www.spigotmc.org/resources/loginsecurity.19362/
Apache License 2.0
99 stars 84 forks source link

Security Risk #297

Open Conrad3k opened 1 year ago

Conrad3k commented 1 year ago

Hello, i have a security risk that i discovered - When a player is not logged in via LoginSecurity, he is able to perform commands that you set via the CustomCommands plugin.

Is there a way to make LoginSecurity prevent ALL commands except for /login from being executed?

Thanks!