Delete samples(reduce repo size)
This commit is contained in:
HaHaWTH
parent
7e6d511ae4
commit
3a0d5f6347
1
.gitignore
vendored
1
.gitignore
vendored
@ -114,3 +114,4 @@ nb-configuration.xml
|
|||||||
### Git ###
|
### Git ###
|
||||||
# Don't exclude the .gitignore itself
|
# Don't exclude the .gitignore itself
|
||||||
!.gitignore
|
!.gitignore
|
||||||
|
/samples/
|
||||||
|
|||||||
@ -1,564 +0,0 @@
|
|||||||
# =======================================================================================================
|
|
||||||
# _____ __ .__ _____ __________ .__ .___ .___
|
|
||||||
# / _ \ __ ___/ |_| |__ / \ ____\______ \ ____ | | _________ __| _/____ __| _/
|
|
||||||
# / /_\ \| | \ __| | \ / \ / \_/ __ \| __/ __ \| | / _ \__ \ / __ _/ __ \ / __ |
|
|
||||||
# / | | | /| | | Y / Y \ ___/| | \ ___/| |_( <_> / __ \/ /_/ \ ___// /_/ |
|
|
||||||
# \____|__ |____/ |__| |___| \____|__ /\___ |____|_ /\___ |____/\____(____ \____ |\___ \____ |
|
|
||||||
# \/ \/ \/ \/ \/ \/ \/ \/ \/ \/
|
|
||||||
#
|
|
||||||
# =======================================================================================================
|
|
||||||
#
|
|
||||||
# Authme Main Configuration File.
|
|
||||||
#
|
|
||||||
# =======================================================================================================
|
|
||||||
|
|
||||||
# Plugin infos (overwritten on start, just a simple way to find out your plugin version).
|
|
||||||
authors: ${pluginAuthors}
|
|
||||||
version: ${project.version}
|
|
||||||
buildNumber: ${buildNumber}
|
|
||||||
|
|
||||||
# Set this setting to true when you have configured the plugin,
|
|
||||||
# when false the server will be stopped with a warning message.
|
|
||||||
enabled: false
|
|
||||||
|
|
||||||
# Database settings.
|
|
||||||
data_source:
|
|
||||||
# ===========================
|
|
||||||
# Database general settings.
|
|
||||||
# ===========================
|
|
||||||
|
|
||||||
# Database backend (sqlite, mysql).
|
|
||||||
backend: sqlite
|
|
||||||
# Enable database queries caching, should improve performance.
|
|
||||||
caching: true
|
|
||||||
|
|
||||||
# ===========================
|
|
||||||
# SqLite db parameters.
|
|
||||||
# ===========================
|
|
||||||
|
|
||||||
sqlite:
|
|
||||||
# The name of the database storage file.
|
|
||||||
filename: 'authme.db'
|
|
||||||
|
|
||||||
# ===========================
|
|
||||||
# MySql db parameters.
|
|
||||||
# ===========================
|
|
||||||
|
|
||||||
mysql:
|
|
||||||
# Connection parameters.
|
|
||||||
host: '127.0.0.1'
|
|
||||||
port: 3306
|
|
||||||
username: 'change_me'
|
|
||||||
password: 'change_me'
|
|
||||||
database: 'my_minecraft_server'
|
|
||||||
tablename: 'authme'
|
|
||||||
|
|
||||||
# Column names.
|
|
||||||
column_names:
|
|
||||||
id: id
|
|
||||||
# Column for storing nicknames (ignore case nickname).
|
|
||||||
name: username
|
|
||||||
# Column for storing the realname (case sensitive nickname).
|
|
||||||
real_name: realname
|
|
||||||
# Column for storing passwords.
|
|
||||||
password: password
|
|
||||||
# Column for storing email addresses.
|
|
||||||
email: email
|
|
||||||
# Column for storing the authentication status (logged or not).
|
|
||||||
login_status: isLogged
|
|
||||||
# Column for storing player IPs.
|
|
||||||
ip: ip
|
|
||||||
# Column for storing lastlogins date and time.
|
|
||||||
last_login_timestamp: lastlogin
|
|
||||||
# Latest logout location of the players.
|
|
||||||
last_location:
|
|
||||||
world: world
|
|
||||||
x: x
|
|
||||||
y: y
|
|
||||||
z: z
|
|
||||||
# Enabled only if the bungeecord integration is activated.
|
|
||||||
server: world
|
|
||||||
|
|
||||||
# Support for registrations via WebInterfaces/CSM.
|
|
||||||
# Disable some backend caching parameters.
|
|
||||||
disableAggressiveCaching: false
|
|
||||||
|
|
||||||
# Main settings
|
|
||||||
settings:
|
|
||||||
|
|
||||||
# ===========================
|
|
||||||
# Bungeecord integration
|
|
||||||
# ===========================
|
|
||||||
|
|
||||||
bungeecord:
|
|
||||||
# Enable bungeecord integration features
|
|
||||||
enabled: true
|
|
||||||
|
|
||||||
# Server name (must be unique, please use the name in the bungeecord configuration).
|
|
||||||
# Use 'auto' for auto configuration (requires the bungeecord module).
|
|
||||||
serverName: LoginLobby1
|
|
||||||
# Keep the auth status when the player moves between servers.
|
|
||||||
# Required if you're using the bungeecord module.
|
|
||||||
keepAuthBetweenServers: true
|
|
||||||
|
|
||||||
# Target server after login
|
|
||||||
send_after_login:
|
|
||||||
enabled: false
|
|
||||||
message: ''
|
|
||||||
delay: 5
|
|
||||||
# Server name ("ServerName") or group ("G:GroupName")
|
|
||||||
# Groups are avariable only when the bungeecord module is avariable.
|
|
||||||
# If the server change fails the player will be kicked.
|
|
||||||
target: Lobby1
|
|
||||||
failKickMessage: 'Failed to connect to the lobby! Please try to join the server again!'
|
|
||||||
# Target server after logout
|
|
||||||
send_after_logout:
|
|
||||||
enabled: false
|
|
||||||
message: ''
|
|
||||||
delay: 5
|
|
||||||
# Server name ("ServerName") or group ("G:GroupName")
|
|
||||||
# Groups are avariable only when the bungeecord module is avariable.
|
|
||||||
# If the server change fails the player will be kicked.
|
|
||||||
target: LoginLobby1
|
|
||||||
failKickMessage: 'Failed to connect to the lobby! Please try to join the server again!'
|
|
||||||
|
|
||||||
# Variables:
|
|
||||||
# %p playername
|
|
||||||
bungee_commands:
|
|
||||||
player_command_after_register:
|
|
||||||
enabled: false
|
|
||||||
cmd: ''
|
|
||||||
console_command_after_register:
|
|
||||||
enabled: false
|
|
||||||
cmd: 'alert %p joined for the first time the network!'
|
|
||||||
player_command_after_login:
|
|
||||||
enabled: false
|
|
||||||
cmd: 'glist'
|
|
||||||
console_command_after_login:
|
|
||||||
enabled: false
|
|
||||||
cmd: 'alert %p logged in correctly!'
|
|
||||||
player_command_after_join:
|
|
||||||
enabled: false
|
|
||||||
cmd: ''
|
|
||||||
console_command_after_join:
|
|
||||||
enabled: false
|
|
||||||
cmd: 'alert %p joined the network!'
|
|
||||||
player_command_first_join:
|
|
||||||
enabled: false
|
|
||||||
cmd: ''
|
|
||||||
console_command_first_join:
|
|
||||||
enabled: false
|
|
||||||
cmd: 'alert %p joined for the first time the network!'
|
|
||||||
|
|
||||||
# ===========================
|
|
||||||
# Sessions configuration.
|
|
||||||
# ===========================
|
|
||||||
|
|
||||||
sessions:
|
|
||||||
# Enable sessions.
|
|
||||||
# When a player is authenticated, his IP and his nickname is saved.
|
|
||||||
# The next time the player will join the server, if his IP is the same
|
|
||||||
# of the last time, and the timeout time hasn't expired, he will be
|
|
||||||
# automatically authenticated.
|
|
||||||
enabled: false
|
|
||||||
# Session timeout.
|
|
||||||
# 0 for unlimited time (Very dangerous, use it at your own risk!)
|
|
||||||
# Consider that if player's ip has changed but the timeout hasn't
|
|
||||||
# expired, player will be kicked out of the sever!
|
|
||||||
timeout: 10
|
|
||||||
# When enabled a player's session will expire if someone tries to
|
|
||||||
# login with a different IP Address.
|
|
||||||
expire_on_ip_change: true
|
|
||||||
|
|
||||||
# ===========================
|
|
||||||
# Registration settings.
|
|
||||||
# ===========================
|
|
||||||
|
|
||||||
registration:
|
|
||||||
# After how many time unregistered players should be kicked?
|
|
||||||
# Set to 0 to disable. (default: 30)
|
|
||||||
timeout: 30
|
|
||||||
|
|
||||||
nickname:
|
|
||||||
min_length: 4
|
|
||||||
max_lenght: 16
|
|
||||||
# Regex syntax.
|
|
||||||
allowed_characters: '[a-zA-Z0-9_]*'
|
|
||||||
|
|
||||||
password:
|
|
||||||
# Enable double check of password on registration:
|
|
||||||
# /register <password> <confirmPassword>
|
|
||||||
double_check: true
|
|
||||||
# Minimum password lenght.
|
|
||||||
min_length: 5
|
|
||||||
# Regex syntax.
|
|
||||||
allowed_characters: '[\x21-\x7E]*'
|
|
||||||
# Denied unsafe passwords.
|
|
||||||
unsafePasswords:
|
|
||||||
- '123456'
|
|
||||||
- 'password'
|
|
||||||
- 'qwerty'
|
|
||||||
- '12345'
|
|
||||||
- '54321'
|
|
||||||
|
|
||||||
# ===========================
|
|
||||||
# Login settings.
|
|
||||||
# ===========================
|
|
||||||
|
|
||||||
login:
|
|
||||||
# After how many time unlogged players should be kicked?
|
|
||||||
# Set to 0 to disable. (default: 30)
|
|
||||||
timeout: 30
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
# ===========================
|
|
||||||
# Encryption parameters.
|
|
||||||
# ===========================
|
|
||||||
|
|
||||||
password_encryption:
|
|
||||||
# The hashing algorithm.
|
|
||||||
# Possible values: MD5, SHA1, SHA256, WHIRLPOOL, XAUTH, MD5VB, PHPBB, MYBB, IPB3,
|
|
||||||
# PHPFUSION, SMF, XENFORO, SALTED2MD5, JOOMLA, BCRYPT, WBB3, SHA512, DOUBLEMD5,
|
|
||||||
# PBKDF2, PBKDF2DJANGO, WORDPRESS, ROYALAUTH, CUSTOM (developpers only).
|
|
||||||
encryption_algorithm: SHA256
|
|
||||||
# The salt length for the SALTED2MD5 and MD5(MD5(password)+salt) algorithms.
|
|
||||||
md5_salt_length: 8
|
|
||||||
# If password check fails try all the other hash algorithm.
|
|
||||||
# AuthMe will update the password to the new passwordHash.
|
|
||||||
enable_convertion: false
|
|
||||||
|
|
||||||
# ===========================
|
|
||||||
# Unlogged user restrictions.
|
|
||||||
# ===========================
|
|
||||||
|
|
||||||
unlogged_restrictions:
|
|
||||||
# Deny chat messages send for unlogged users.
|
|
||||||
deny_chat: true
|
|
||||||
# Hide chat to unlogged users.
|
|
||||||
# Only player messages, plugins will be able to send messages to the player anyway.
|
|
||||||
hide_chat: false
|
|
||||||
|
|
||||||
# Deny any command message not in the whitelist below.
|
|
||||||
deny_commands: true
|
|
||||||
command_whitelist:
|
|
||||||
- /login
|
|
||||||
- /register
|
|
||||||
- /l
|
|
||||||
- /reg
|
|
||||||
- /email
|
|
||||||
- /captcha
|
|
||||||
|
|
||||||
movements:
|
|
||||||
# Restrict player movements.
|
|
||||||
restrict: true
|
|
||||||
# Allowed radius.
|
|
||||||
allowed_radius: 0
|
|
||||||
# Should unlogged players have speed = 0?
|
|
||||||
# After the login the walking/flying speeed will be reset to the default value.
|
|
||||||
removeSpeed: true
|
|
||||||
|
|
||||||
# End is there atm xD
|
|
||||||
|
|
||||||
# This option will save the quit location of the players.
|
|
||||||
SaveQuitLocation: false
|
|
||||||
# Should not logged in players be teleported to the spawn?
|
|
||||||
# After the authentication, if SaveQuitLocation is enabled,
|
|
||||||
# they will be teleported back to their normal position.
|
|
||||||
teleportUnAuthedToSpawn: false
|
|
||||||
|
|
||||||
# If enabled, after the login, if the ForceSpawnOnTheseWorlds setting contains
|
|
||||||
# the player's world, he will be teleported to the world spawnpoint.
|
|
||||||
# The quit location of the player will be overwritten.
|
|
||||||
# This is different from "teleportUnAuthedToSpawn" that teleports player
|
|
||||||
# back to his quit location after the authentication.
|
|
||||||
ForceSpawnLocOnJoinEnabled: false
|
|
||||||
# WorldNames where we need to force the spawn location
|
|
||||||
# Warning: This setting is Case Sensitive!
|
|
||||||
ForceSpawnOnTheseWorlds:
|
|
||||||
- world
|
|
||||||
- world_nether
|
|
||||||
- world_the_end
|
|
||||||
|
|
||||||
# this is very important options,
|
|
||||||
# every time player join the server,
|
|
||||||
# if they are registered, AuthMe will switch him
|
|
||||||
# to unLoggedInGroup, this
|
|
||||||
# should prevent all major exploit.
|
|
||||||
# So you can set up on your Permission Plugin
|
|
||||||
# this special group with 0 permissions, or permissions to chat,
|
|
||||||
# or permission to
|
|
||||||
# send private message or all other perms that you want,
|
|
||||||
# the better way is to set up
|
|
||||||
# this group with few permissions,
|
|
||||||
# so if player try to exploit some account,
|
|
||||||
# they can
|
|
||||||
# do anything except what you set in perm Group.
|
|
||||||
# After a correct logged-in player will be
|
|
||||||
# moved to his correct permissions group!
|
|
||||||
# Pay attention group name is case sensitive,
|
|
||||||
# so Admin is different from admin,
|
|
||||||
# otherwise your group will be wiped,
|
|
||||||
# and player join in default group []!
|
|
||||||
# Example unLoggedinGroup: NotLogged
|
|
||||||
unLoggedinGroup: unLoggedinGroup
|
|
||||||
|
|
||||||
# ===========================
|
|
||||||
# Address restrictions
|
|
||||||
# ===========================
|
|
||||||
|
|
||||||
# Max number of registrations per IP (default: 1)
|
|
||||||
maxRegPerIp: 1
|
|
||||||
# Maximum allowed number of Logins per IP, 0 to disable (default: 0)
|
|
||||||
maxLoginPerIp: 0
|
|
||||||
# Maximum allowed number of Joins per IP, 0 to disable (default: 0)
|
|
||||||
maxJoinPerIp: 0
|
|
||||||
|
|
||||||
# When this setting is enabled, online players can't be kicked out
|
|
||||||
# due to "Logged in from another Location"
|
|
||||||
# This setting will prevent potential security exploits.
|
|
||||||
ForceSingleSession: true
|
|
||||||
|
|
||||||
# To activate the restricted user feature you need
|
|
||||||
# to enable this option and configure the
|
|
||||||
# AllowedRestrictedUser field.
|
|
||||||
AllowRestrictedUser: false
|
|
||||||
# The restricted user feature will kick players listed below
|
|
||||||
# if they dont match of the defined ip address.
|
|
||||||
# Example:
|
|
||||||
# AllowedRestrictedUser:
|
|
||||||
# - playername;127.0.0.1
|
|
||||||
AllowedRestrictedUser:
|
|
||||||
- playername;127.0.0.
|
|
||||||
# Ban ip when the ip is not the ip registered in database
|
|
||||||
banUnsafedIP: false
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
# ===============================
|
|
||||||
# Other restrictions
|
|
||||||
# ===============================
|
|
||||||
|
|
||||||
# Should we protect the player inventory before logging in?
|
|
||||||
# Warning: Requires the latest version of ProtocolLib!
|
|
||||||
ProtectInventoryBeforeLogIn: true
|
|
||||||
|
|
||||||
# Should unregistered players be kicked immediately?
|
|
||||||
kickNonRegistered: false
|
|
||||||
# Should players be kicked on wrong password?
|
|
||||||
kickOnWrongPassword: false
|
|
||||||
|
|
||||||
# Should we display all other accounts of a player when he joins?
|
|
||||||
# Required permission: authme.admin.accounts
|
|
||||||
displayOtherAccounts: true
|
|
||||||
|
|
||||||
# ===============================
|
|
||||||
# Restrictions compatibility
|
|
||||||
# ===============================
|
|
||||||
|
|
||||||
# Spawn Priority. Avariable values : authme, essentials, multiverse, default
|
|
||||||
spawnPriority: authme,essentials,multiverse,default
|
|
||||||
# AuthMe will NEVER teleport players!
|
|
||||||
noTeleport: false
|
|
||||||
|
|
||||||
GameMode:
|
|
||||||
# Do you want to set player's gamemode to survival when he joins?
|
|
||||||
# This enables also the settings below.
|
|
||||||
ForceSurvivalMode: false
|
|
||||||
# Do you want to reset player's inventory if player joins with creative mode?
|
|
||||||
ResetInventoryIfCreative: false
|
|
||||||
# Do you want to force the survival mode ONLY after the /login process?
|
|
||||||
ForceOnlyAfterLogin: false
|
|
||||||
|
|
||||||
# sgdc3: Ok, our configuration is shit.... xD Today I will stop there
|
|
||||||
|
|
||||||
|
|
||||||
registration:
|
|
||||||
# enable registration on the server?
|
|
||||||
enabled: true
|
|
||||||
# Send every X seconds a message to a player to
|
|
||||||
# remind him that he has to login/register
|
|
||||||
messageInterval: 5
|
|
||||||
# Only registered and logged in players can play.
|
|
||||||
# See restrictions for exceptions
|
|
||||||
force: true
|
|
||||||
# Does we replace password registration by an Email registration method ?
|
|
||||||
enableEmailRegistrationSystem: false
|
|
||||||
# Enable double check of email when you register
|
|
||||||
# when it's true, registration require that kind of command:
|
|
||||||
# /register <email> <confirmEmail>
|
|
||||||
doubleEmailCheck: false
|
|
||||||
# Do we force kicking player after a successful registration ?
|
|
||||||
# Do not use with login feature below
|
|
||||||
forceKickAfterRegister: false
|
|
||||||
# Does AuthMe need to enforce a /login after a successful registration ?
|
|
||||||
forceLoginAfterRegister: false
|
|
||||||
unrestrictions:
|
|
||||||
# below you can list all your account name, that
|
|
||||||
# AuthMe will ignore for registration or login, configure it
|
|
||||||
# at your own risk!! Remember that if you are going to add
|
|
||||||
# nickname with [], you have to delimit name with ' '.
|
|
||||||
# this option add compatibility with BuildCraft and some
|
|
||||||
# other mods.
|
|
||||||
# It is CaseSensitive!
|
|
||||||
UnrestrictedName: []
|
|
||||||
# Message language, available : en, de, br, cz, pl, fr, ru, hu, sk, es, zhtw, fi, zhcn, lt, it, ko, pt
|
|
||||||
messagesLanguage: en
|
|
||||||
# Force these commands after /login, without any '/', use %p for replace with player name
|
|
||||||
forceCommands: []
|
|
||||||
# Force these commands after /login as a server console, without any '/', use %p for replace with player name
|
|
||||||
forceCommandsAsConsole: []
|
|
||||||
# Force these commands after /register, without any '/', use %p for replace with player name
|
|
||||||
forceRegisterCommands: []
|
|
||||||
# Force these commands after /register as a server console, without any '/', use %p for replace with player name
|
|
||||||
forceRegisterCommandsAsConsole: []
|
|
||||||
# Do we need to broadcast the welcome message to all server or only to the player? set true for server or false for player
|
|
||||||
broadcastWelcomeMessage: false
|
|
||||||
# Do we need to delay the join/leave message to be displayed only when the player is authenticated ?
|
|
||||||
delayJoinMessage: false
|
|
||||||
removeJoinMessage: false
|
|
||||||
removeLeaveMessage: false
|
|
||||||
# Do we need to add potion effect Blinding before login/register ?
|
|
||||||
applyBlindEffect: false
|
|
||||||
ExternalBoardOptions:
|
|
||||||
# MySQL column for the salt , needed for some forum/cms support
|
|
||||||
mySQLColumnSalt: ''
|
|
||||||
# MySQL column for the group, needed for some forum/cms support
|
|
||||||
mySQLColumnGroup: ''
|
|
||||||
# -1 mean disabled. If u want that only
|
|
||||||
# activated player can login in your server
|
|
||||||
# u can put in this options the group number
|
|
||||||
# of unactivated user, needed for some forum/cms support
|
|
||||||
nonActivedUserGroup: -1
|
|
||||||
# Other MySQL columns where we need to put the Username (case sensitive)
|
|
||||||
mySQLOtherUsernameColumns: []
|
|
||||||
# How much Log to Round needed in BCrypt(do not change it if you do not know what's your doing)
|
|
||||||
bCryptLog2Round: 10
|
|
||||||
# phpBB prefix defined during phpbb installation process
|
|
||||||
phpbbTablePrefix: 'phpbb_'
|
|
||||||
# phpBB activated group id , 2 is default registered group defined by phpbb
|
|
||||||
phpbbActivatedGroupId: 2
|
|
||||||
# WordPress prefix defined during WordPress installation process
|
|
||||||
wordpressTablePrefix: 'wp_'
|
|
||||||
permission:
|
|
||||||
# Take care with this options, if you dont want
|
|
||||||
# to use Vault and Group Switching of
|
|
||||||
# AuthMe for unloggedIn players put true
|
|
||||||
# below, default is false.
|
|
||||||
EnablePermissionCheck: false
|
|
||||||
BackupSystem:
|
|
||||||
# Enable or Disable Automatic Backup
|
|
||||||
ActivateBackup: false
|
|
||||||
# set Backup at every start of Server
|
|
||||||
OnServerStart: false
|
|
||||||
# set Backup at every stop of Server
|
|
||||||
OnServerStop: true
|
|
||||||
# Windows only mysql installation Path
|
|
||||||
MysqlWindowsPath: 'C:\\Program Files\\MySQL\\MySQL Server 5.1\\'
|
|
||||||
Security:
|
|
||||||
SQLProblem:
|
|
||||||
# Stop the server if we can't contact the sql database
|
|
||||||
# Take care with this, if you set that to false,
|
|
||||||
# AuthMe automatically disable and the server is not protected!
|
|
||||||
stopServer: true
|
|
||||||
ReloadCommand:
|
|
||||||
# /reload support
|
|
||||||
useReloadCommandSupport: true
|
|
||||||
console:
|
|
||||||
# Remove spam console
|
|
||||||
noConsoleSpam: false
|
|
||||||
captcha:
|
|
||||||
# Player need to put a captcha when he fails too lot the password
|
|
||||||
useCaptcha: false
|
|
||||||
# Max allowed tries before request a captcha
|
|
||||||
maxLoginTry: 5
|
|
||||||
# Captcha length
|
|
||||||
captchaLength: 5
|
|
||||||
Converter:
|
|
||||||
Rakamak:
|
|
||||||
# Rakamak file name
|
|
||||||
fileName: users.rak
|
|
||||||
# Rakamak use ip ?
|
|
||||||
useIP: false
|
|
||||||
# IP file name for rakamak
|
|
||||||
ipFileName: UsersIp.rak
|
|
||||||
CrazyLogin:
|
|
||||||
# CrazyLogin database file
|
|
||||||
fileName: accounts.db
|
|
||||||
Email:
|
|
||||||
# Email SMTP server host
|
|
||||||
mailSMTP: smtp.gmail.com
|
|
||||||
# Email SMTP server port
|
|
||||||
mailPort: 465
|
|
||||||
# Email account that send the mail
|
|
||||||
mailAccount: ''
|
|
||||||
# Email account password
|
|
||||||
mailPassword: ''
|
|
||||||
# Custom SenderName, that replace the mailAccount name in the email
|
|
||||||
mailSenderName: ''
|
|
||||||
# Random password length
|
|
||||||
RecoveryPasswordLength: 8
|
|
||||||
# Email subject of password get
|
|
||||||
mailSubject: 'Your new AuthMe Password'
|
|
||||||
# Email text here
|
|
||||||
mailText: 'Dear <playername>, <br /><br /> This is your new AuthMe password for the server <br /><br /> <servername> : <br /><br /> <generatedpass><br /><br />Do not forget to change password after login! <br /> /changepassword <generatedpass> newPassword'
|
|
||||||
# Like maxRegPerIp but with email
|
|
||||||
maxRegPerEmail: 1
|
|
||||||
# Recall players to add an email ?
|
|
||||||
recallPlayers: false
|
|
||||||
# Delay in minute for the recall scheduler
|
|
||||||
delayRecall: 5
|
|
||||||
# Blacklist these domains for emails
|
|
||||||
emailBlacklisted:
|
|
||||||
- 10minutemail.com
|
|
||||||
# WhiteList only these domains for emails
|
|
||||||
emailWhitelisted: []
|
|
||||||
# Do we need to send new password draw in an image ?
|
|
||||||
generateImage: false
|
|
||||||
Hooks:
|
|
||||||
# Do we need to hook with multiverse for spawn checking?
|
|
||||||
multiverse: true
|
|
||||||
# Do we need to hook with BungeeCord for get the real Player ip ?
|
|
||||||
bungeecord: false
|
|
||||||
# Do we need to disable Essentials SocialSpy on join ?
|
|
||||||
disableSocialSpy: true
|
|
||||||
# Do we need to force /motd Essentials command on join ?
|
|
||||||
useEssentialsMotd: false
|
|
||||||
# Do we need to cache custom Attributes ?
|
|
||||||
customAttributes: false
|
|
||||||
Purge:
|
|
||||||
# On Enable , does AuthMe need to purge automatically old accounts unused ?
|
|
||||||
useAutoPurge: false
|
|
||||||
# Number of Days an account become Unused
|
|
||||||
daysBeforeRemovePlayer: 60
|
|
||||||
# Do we need to remove the player.dat file during purge process ?
|
|
||||||
removePlayerDat: false
|
|
||||||
# Do we need to remove the Essentials/users/player.yml file during purge process ?
|
|
||||||
removeEssentialsFile: false
|
|
||||||
# World where are players.dat stores
|
|
||||||
defaultWorld: 'world'
|
|
||||||
# Do we need to remove LimitedCreative/inventories/player.yml , player_creative.yml files during purge process ?
|
|
||||||
removeLimitedCreativesInventories: false
|
|
||||||
# Do we need to remove the AntiXRayData/PlayerData/player file during purge process ?
|
|
||||||
removeAntiXRayFile: false
|
|
||||||
# Do we need to remove permissions ?
|
|
||||||
removePermissions: false
|
|
||||||
Protection:
|
|
||||||
# Enable some servers protection ( country based login, antibot )
|
|
||||||
enableProtection: false
|
|
||||||
# Countries allowed to join the server and register, see http://dev.bukkit.org/bukkit-plugins/authme-reloaded/pages/countries-codes/ for countries' codes
|
|
||||||
countries:
|
|
||||||
- US
|
|
||||||
- GB
|
|
||||||
# Countries blacklisted automatically ( without any needed to enable protection )
|
|
||||||
countriesBlacklist:
|
|
||||||
- A1
|
|
||||||
# Do we need to enable automatic antibot system?
|
|
||||||
enableAntiBot: false
|
|
||||||
# Max number of player allowed to login in 5 secs before enable AntiBot system automatically
|
|
||||||
antiBotSensibility: 5
|
|
||||||
# Duration in minutes of the antibot automatic system
|
|
||||||
antiBotDuration: 10
|
|
||||||
VeryGames:
|
|
||||||
# These features are only available on VeryGames Server Provider
|
|
||||||
enableIpCheck: false
|
|
||||||
@ -1,199 +0,0 @@
|
|||||||
name: ${pluginName}
|
|
||||||
authors: [${pluginAuthors}]
|
|
||||||
website: ${project.url}
|
|
||||||
description: ${project.description}
|
|
||||||
main: ${mainClass}
|
|
||||||
version: ${project.version}-b${buildNumber}
|
|
||||||
softdepend:
|
|
||||||
- Vault
|
|
||||||
- PermissionsBukkit
|
|
||||||
- PermissionsEX
|
|
||||||
- EssentialsGroupManager
|
|
||||||
- Multiverse-Core
|
|
||||||
- Essentials
|
|
||||||
- EssentialsSpawn
|
|
||||||
- ProtocolLib
|
|
||||||
commands:
|
|
||||||
authme:
|
|
||||||
description: AuthMe admin commands
|
|
||||||
usage: '/authme reload|register playername password|changepassword playername password|unregister playername|version|converter datatype'
|
|
||||||
permission: authme.admin
|
|
||||||
register:
|
|
||||||
description: Register an account
|
|
||||||
usage: /register password confirmpassword
|
|
||||||
aliases: [reg]
|
|
||||||
permission: authme.player.register
|
|
||||||
login:
|
|
||||||
description: Login into a account
|
|
||||||
usage: /login password
|
|
||||||
aliases: [l,log]
|
|
||||||
permission: authme.player.login
|
|
||||||
changepassword:
|
|
||||||
description: Change password of a account
|
|
||||||
usage: /changepassword oldPassword newPassword
|
|
||||||
permission: authme.player.changepassword
|
|
||||||
logout:
|
|
||||||
description: Logout from the server
|
|
||||||
usage: /logout
|
|
||||||
permission: authme.player.logout
|
|
||||||
unregister:
|
|
||||||
description: unregister your account
|
|
||||||
usage: /unregister password
|
|
||||||
permission: authme.player.unregister
|
|
||||||
email:
|
|
||||||
description: Add Email or recover password
|
|
||||||
usage: '/email add your@email.com your@email.com|change oldEmail newEmail|recovery your@email.com'
|
|
||||||
permission: authme.player.email
|
|
||||||
captcha:
|
|
||||||
description: Captcha command
|
|
||||||
usage: /captcha theCaptcha
|
|
||||||
permission: authme.player.captcha
|
|
||||||
permissions:
|
|
||||||
authme.canbeforced:
|
|
||||||
description: Allow the user to be forced-logged via API
|
|
||||||
default: true
|
|
||||||
authme.player:
|
|
||||||
description: Gives access to all authme player commands
|
|
||||||
default: true
|
|
||||||
children:
|
|
||||||
authme.player.login: true
|
|
||||||
authme.player.logout: true
|
|
||||||
authme.player.register: true
|
|
||||||
authme.player.unregister: true
|
|
||||||
authme.player.changepassword: true
|
|
||||||
authme.player.captcha: true
|
|
||||||
authme.player.email: true
|
|
||||||
authme.player.register:
|
|
||||||
description: Register your account
|
|
||||||
default: false
|
|
||||||
authme.player.unregister:
|
|
||||||
description: Unregister your account
|
|
||||||
default: false
|
|
||||||
authme.player.login:
|
|
||||||
description: Login into your account
|
|
||||||
default: false
|
|
||||||
authme.player.logout:
|
|
||||||
description: Logout from your account
|
|
||||||
default: false
|
|
||||||
authme.player.changepassword:
|
|
||||||
description: Change password of your account
|
|
||||||
default: false
|
|
||||||
authme.player.email:
|
|
||||||
description: Gives access to player's email commands
|
|
||||||
default: false
|
|
||||||
children:
|
|
||||||
authme.player.email.add: true
|
|
||||||
authme.player.email.change: true
|
|
||||||
authme.player.email.recover: true
|
|
||||||
authme.player.email.add:
|
|
||||||
description: Add an email to your account
|
|
||||||
default: false
|
|
||||||
authme.player.email.change:
|
|
||||||
description: Change email of your account
|
|
||||||
default: false
|
|
||||||
authme.player.email.recover:
|
|
||||||
description: Recover your account
|
|
||||||
default: false
|
|
||||||
authme.player.captcha:
|
|
||||||
description: Captcha command
|
|
||||||
default: false
|
|
||||||
authme.admin:
|
|
||||||
description: Gives access to all authme admin commands
|
|
||||||
default: op
|
|
||||||
children:
|
|
||||||
authme.admin.forcelogin: true
|
|
||||||
authme.admin.forcelogout: true
|
|
||||||
authme.admin.register: true
|
|
||||||
authme.admin.unregister: true
|
|
||||||
authme.admin.changemail: true
|
|
||||||
authme.admin.changepassword: true
|
|
||||||
authme.admin.lastlogin: true
|
|
||||||
authme.admin.accounts: true
|
|
||||||
authme.admin.getemail: true
|
|
||||||
authme.admin.getip: true
|
|
||||||
authme.admin.setspawn: true
|
|
||||||
authme.admin.spawn: true
|
|
||||||
authme.admin.setfirstspawn: true
|
|
||||||
authme.admin.firstspawn: true
|
|
||||||
authme.admin.purge: true
|
|
||||||
authme.admin.purgebannedplayers: true
|
|
||||||
authme.admin.purgelastpos: true
|
|
||||||
authme.admin.converter: true
|
|
||||||
authme.admin.reload: true
|
|
||||||
authme.admin.switchantibot: true
|
|
||||||
authme.admin.seeotheraccounts: true
|
|
||||||
authme.admin.register:
|
|
||||||
description: Register an account
|
|
||||||
default: false
|
|
||||||
authme.admin.unregister:
|
|
||||||
description: Unregister an account
|
|
||||||
default: false
|
|
||||||
authme.admin.forcelogin:
|
|
||||||
description: Force login for that player
|
|
||||||
default: false
|
|
||||||
authme.admin.forcelogout:
|
|
||||||
description: Force logout for that player
|
|
||||||
default: false
|
|
||||||
authme.admin.changepassword:
|
|
||||||
description: Change the password of an account
|
|
||||||
default: false
|
|
||||||
authme.admin.getemail:
|
|
||||||
description: Get last email about a player
|
|
||||||
default: false
|
|
||||||
authme.admin.changeemail:
|
|
||||||
description: Change a player email
|
|
||||||
default: false
|
|
||||||
authme.admin.accounts:
|
|
||||||
description: Display Players Accounts
|
|
||||||
default: false
|
|
||||||
authme.admin.seeotheraccounts:
|
|
||||||
description: Display other accounts about a player when he logs in
|
|
||||||
default: false
|
|
||||||
authme.admin.lastlogin:
|
|
||||||
description: Get last login date about a player
|
|
||||||
default: false
|
|
||||||
authme.admin.getip:
|
|
||||||
description: Get IP from a player (fake and real)
|
|
||||||
default: false
|
|
||||||
authme.admin.setspawn:
|
|
||||||
description: Set the AuthMe spawn point
|
|
||||||
default: false
|
|
||||||
authme.admin.spawn:
|
|
||||||
description: Teleport to AuthMe spawn point
|
|
||||||
default: false
|
|
||||||
authme.admin.setfirstspawn:
|
|
||||||
description: Set the AuthMe First Spawn Point
|
|
||||||
default: false
|
|
||||||
authme.admin.firstspawn:
|
|
||||||
description: Teleport to AuthMe First Spawn Point
|
|
||||||
default: false
|
|
||||||
authme.admin.switchantibot:
|
|
||||||
description: Switch AntiBot mode on/off
|
|
||||||
default: false
|
|
||||||
authme.admin.purge:
|
|
||||||
description: Database purge command
|
|
||||||
default: false
|
|
||||||
authme.admin.purgebannedplayers:
|
|
||||||
description: Purge banned players
|
|
||||||
default: false
|
|
||||||
authme.admin.purgelastpos:
|
|
||||||
description: Purge last position of a player/players
|
|
||||||
default: false
|
|
||||||
authme.admin.converter:
|
|
||||||
description: Allow the /authme converter command
|
|
||||||
default: false
|
|
||||||
authme.admin.reload:
|
|
||||||
description: Reload the plugin
|
|
||||||
default: false
|
|
||||||
authme.vip:
|
|
||||||
description: Allow vip slot when the server is full
|
|
||||||
default: false
|
|
||||||
authme.bypassantibot:
|
|
||||||
description: Bypass the AntiBot check
|
|
||||||
default: false
|
|
||||||
authme.allowmultipleaccounts:
|
|
||||||
description: Allow more accounts for same ip
|
|
||||||
default: false
|
|
||||||
authme.bypassforcesurvival:
|
|
||||||
description: Bypass all ForceSurvival features
|
|
||||||
default: false
|
|
||||||
File diff suppressed because one or more lines are too long
@ -1,148 +0,0 @@
|
|||||||
<?php
|
|
||||||
|
|
||||||
/*****************************************************************************
|
|
||||||
* AuthMe website integration logic *
|
|
||||||
* ------------------------------------------------------------------------- *
|
|
||||||
* Allows interaction with the AuthMe database (registration, password *
|
|
||||||
* verification). Don't forget to update the AUTHME_TABLE value and your *
|
|
||||||
* database credentials in getAuthmeMySqli(). *
|
|
||||||
* *
|
|
||||||
* Source: https://github.com/AuthMe/AuthMeReloaded/ *
|
|
||||||
*****************************************************************************/
|
|
||||||
abstract class AuthMeController {
|
|
||||||
|
|
||||||
const AUTHME_TABLE = 'authme';
|
|
||||||
|
|
||||||
/**
|
|
||||||
* Entry point function to check supplied credentials against the AuthMe database.
|
|
||||||
*
|
|
||||||
* @param string $username the username
|
|
||||||
* @param string $password the password
|
|
||||||
* @return bool true iff the data is correct, false otherwise
|
|
||||||
*/
|
|
||||||
function checkPassword($username, $password) {
|
|
||||||
if (is_scalar($username) && is_scalar($password)) {
|
|
||||||
$hash = $this->getHashFromDatabase($username);
|
|
||||||
if ($hash) {
|
|
||||||
return $this->isValidPassword($password, $hash);
|
|
||||||
}
|
|
||||||
}
|
|
||||||
return false;
|
|
||||||
}
|
|
||||||
|
|
||||||
/**
|
|
||||||
* Returns whether the user exists in the database or not.
|
|
||||||
*
|
|
||||||
* @param string $username the username to check
|
|
||||||
* @return bool true if the user exists; false otherwise
|
|
||||||
*/
|
|
||||||
function isUserRegistered($username) {
|
|
||||||
$mysqli = $this->getAuthmeMySqli();
|
|
||||||
if ($mysqli !== null) {
|
|
||||||
$stmt = $mysqli->prepare('SELECT 1 FROM ' . self::AUTHME_TABLE . ' WHERE username = ?');
|
|
||||||
$stmt->bind_param('s', $username);
|
|
||||||
$stmt->execute();
|
|
||||||
return $stmt->fetch();
|
|
||||||
}
|
|
||||||
|
|
||||||
// Defensive default to true; we actually don't know
|
|
||||||
return true;
|
|
||||||
}
|
|
||||||
|
|
||||||
/**
|
|
||||||
* Registers a player with the given username.
|
|
||||||
*
|
|
||||||
* @param string $username the username to register
|
|
||||||
* @param string $password the password to associate to the user
|
|
||||||
* @param string $email the email (may be empty)
|
|
||||||
* @return bool whether or not the registration was successful
|
|
||||||
*/
|
|
||||||
function register($username, $password, $email) {
|
|
||||||
$email = $email ? $email : 'your@email.com';
|
|
||||||
$mysqli = $this->getAuthmeMySqli();
|
|
||||||
if ($mysqli !== null) {
|
|
||||||
$hash = $this->hash($password);
|
|
||||||
$stmt = $mysqli->prepare('INSERT INTO ' . self::AUTHME_TABLE . ' (username, realname, password, email, ip) '
|
|
||||||
. 'VALUES (?, ?, ?, ?, ?)');
|
|
||||||
$username_low = strtolower($username);
|
|
||||||
$stmt->bind_param('sssss', $username_low, $username, $hash, $email, $_SERVER['REMOTE_ADDR']);
|
|
||||||
return $stmt->execute();
|
|
||||||
}
|
|
||||||
return false;
|
|
||||||
}
|
|
||||||
|
|
||||||
|
|
||||||
/**
|
|
||||||
* Changes password for player.
|
|
||||||
*
|
|
||||||
* @param string $username the username
|
|
||||||
* @param string $password the password
|
|
||||||
* @return bool true whether or not password change was successful
|
|
||||||
*/
|
|
||||||
function changePassword($username, $password) {
|
|
||||||
$mysqli = $this->getAuthmeMySqli();
|
|
||||||
if ($mysqli !== null) {
|
|
||||||
$hash = $this->hash($password);
|
|
||||||
$stmt = $mysqli->prepare('UPDATE ' . self::AUTHME_TABLE . ' SET password=? '
|
|
||||||
. 'WHERE username=?');
|
|
||||||
$username_low = strtolower($username);
|
|
||||||
$stmt->bind_param('ss', $hash, $username_low);
|
|
||||||
return $stmt->execute();
|
|
||||||
}
|
|
||||||
return false;
|
|
||||||
}
|
|
||||||
|
|
||||||
/**
|
|
||||||
* Hashes the given password.
|
|
||||||
*
|
|
||||||
* @param $password string the clear-text password to hash
|
|
||||||
* @return string the resulting hash
|
|
||||||
*/
|
|
||||||
protected abstract function hash($password);
|
|
||||||
|
|
||||||
/**
|
|
||||||
* Checks whether the given password matches the hash.
|
|
||||||
*
|
|
||||||
* @param $password string the clear-text password
|
|
||||||
* @param $hash string the password hash
|
|
||||||
* @return boolean true if the password matches, false otherwise
|
|
||||||
*/
|
|
||||||
protected abstract function isValidPassword($password, $hash);
|
|
||||||
|
|
||||||
/**
|
|
||||||
* Returns a connection to the database.
|
|
||||||
*
|
|
||||||
* @return mysqli|null the mysqli object or null upon error
|
|
||||||
*/
|
|
||||||
private function getAuthmeMySqli() {
|
|
||||||
// CHANGE YOUR DATABASE DETAILS HERE BELOW: host, user, password, database name
|
|
||||||
$mysqli = new mysqli('localhost', 'root', '', 'authme');
|
|
||||||
if (mysqli_connect_error()) {
|
|
||||||
printf('Could not connect to AuthMe database. Errno: %d, error: "%s"',
|
|
||||||
mysqli_connect_errno(), mysqli_connect_error());
|
|
||||||
return null;
|
|
||||||
}
|
|
||||||
return $mysqli;
|
|
||||||
}
|
|
||||||
|
|
||||||
/**
|
|
||||||
* Retrieves the hash associated with the given user from the database.
|
|
||||||
*
|
|
||||||
* @param string $username the username whose hash should be retrieved
|
|
||||||
* @return string|null the hash, or null if unavailable (e.g. username doesn't exist)
|
|
||||||
*/
|
|
||||||
private function getHashFromDatabase($username) {
|
|
||||||
$mysqli = $this->getAuthmeMySqli();
|
|
||||||
if ($mysqli !== null) {
|
|
||||||
$stmt = $mysqli->prepare('SELECT password FROM ' . self::AUTHME_TABLE . ' WHERE username = ?');
|
|
||||||
$stmt->bind_param('s', $username);
|
|
||||||
$stmt->execute();
|
|
||||||
$stmt->bind_result($password);
|
|
||||||
if ($stmt->fetch()) {
|
|
||||||
return $password;
|
|
||||||
}
|
|
||||||
}
|
|
||||||
return null;
|
|
||||||
}
|
|
||||||
|
|
||||||
}
|
|
||||||
@ -1,20 +0,0 @@
|
|||||||
<?php
|
|
||||||
|
|
||||||
/***********************************************************
|
|
||||||
* AuthMe website integration logic for BCrypt *
|
|
||||||
* ------------------------------------------------------- *
|
|
||||||
* See AuthMeController for details. *
|
|
||||||
* *
|
|
||||||
* Source: https://github.com/AuthMe/AuthMeReloaded/ *
|
|
||||||
***********************************************************/
|
|
||||||
class Bcrypt extends AuthMeController {
|
|
||||||
|
|
||||||
protected function hash($password) {
|
|
||||||
return password_hash($password, PASSWORD_BCRYPT);
|
|
||||||
}
|
|
||||||
|
|
||||||
protected function isValidPassword($password, $hash) {
|
|
||||||
return password_verify($password, $hash);
|
|
||||||
}
|
|
||||||
|
|
||||||
}
|
|
||||||
@ -1,53 +0,0 @@
|
|||||||
<?php
|
|
||||||
|
|
||||||
/***********************************************************
|
|
||||||
* AuthMe website integration logic for PBKDF2 *
|
|
||||||
* ------------------------------------------------------- *
|
|
||||||
* See AuthMeController for details. *
|
|
||||||
* *
|
|
||||||
* Source: https://github.com/AuthMe/AuthMeReloaded/ *
|
|
||||||
***********************************************************/
|
|
||||||
class Pbkdf2 extends AuthMeController {
|
|
||||||
|
|
||||||
/** @var string[] range of characters for salt generation */
|
|
||||||
private $CHARS;
|
|
||||||
|
|
||||||
const SALT_LENGTH = 16;
|
|
||||||
const NUMBER_OF_ITERATIONS = 10000;
|
|
||||||
|
|
||||||
public function __construct() {
|
|
||||||
$this->CHARS = self::initCharRange();
|
|
||||||
}
|
|
||||||
|
|
||||||
protected function isValidPassword($password, $hash) {
|
|
||||||
// hash := pbkdf2_sha256$iterations$salt$hash
|
|
||||||
$parts = explode('$', $hash);
|
|
||||||
return count($parts) === 4 && $hash === $this->computeHash($parts[1], $parts[2], $password);
|
|
||||||
}
|
|
||||||
|
|
||||||
protected function hash($password) {
|
|
||||||
$salt = $this->generateSalt();
|
|
||||||
return $this->computeHash(self::NUMBER_OF_ITERATIONS, $salt, $password);
|
|
||||||
}
|
|
||||||
|
|
||||||
private function computeHash($iterations, $salt, $password) {
|
|
||||||
return 'pbkdf2_sha256$' . self::NUMBER_OF_ITERATIONS . '$' . $salt
|
|
||||||
. '$' . hash_pbkdf2('sha256', $password, $salt, self::NUMBER_OF_ITERATIONS, 64, false);
|
|
||||||
}
|
|
||||||
|
|
||||||
/**
|
|
||||||
* @return string randomly generated salt
|
|
||||||
*/
|
|
||||||
private function generateSalt() {
|
|
||||||
$maxCharIndex = count($this->CHARS) - 1;
|
|
||||||
$salt = '';
|
|
||||||
for ($i = 0; $i < self::SALT_LENGTH; ++$i) {
|
|
||||||
$salt .= $this->CHARS[mt_rand(0, $maxCharIndex)];
|
|
||||||
}
|
|
||||||
return $salt;
|
|
||||||
}
|
|
||||||
|
|
||||||
private static function initCharRange() {
|
|
||||||
return array_merge(range('0', '9'), range('a', 'f'));
|
|
||||||
}
|
|
||||||
}
|
|
||||||
@ -1,48 +0,0 @@
|
|||||||
<?php
|
|
||||||
|
|
||||||
/***********************************************************
|
|
||||||
* AuthMe website integration logic for SHA256 *
|
|
||||||
* ------------------------------------------------------- *
|
|
||||||
* See AuthMeController for details. *
|
|
||||||
* *
|
|
||||||
* Source: https://github.com/AuthMe/AuthMeReloaded/ *
|
|
||||||
***********************************************************/
|
|
||||||
class Sha256 extends AuthMeController {
|
|
||||||
|
|
||||||
/** @var string[] range of characters for salt generation */
|
|
||||||
private $CHARS;
|
|
||||||
|
|
||||||
const SALT_LENGTH = 16;
|
|
||||||
|
|
||||||
public function __construct() {
|
|
||||||
$this->CHARS = self::initCharRange();
|
|
||||||
}
|
|
||||||
|
|
||||||
protected function isValidPassword($password, $hash) {
|
|
||||||
// $SHA$salt$hash, where hash := sha256(sha256(password) . salt)
|
|
||||||
$parts = explode('$', $hash);
|
|
||||||
return count($parts) === 4 && $parts[3] === hash('sha256', hash('sha256', $password) . $parts[2]);
|
|
||||||
}
|
|
||||||
|
|
||||||
protected function hash($password) {
|
|
||||||
$salt = $this->generateSalt();
|
|
||||||
return '$SHA$' . $salt . '$' . hash('sha256', hash('sha256', $password) . $salt);
|
|
||||||
}
|
|
||||||
|
|
||||||
/**
|
|
||||||
* @return string randomly generated salt
|
|
||||||
*/
|
|
||||||
private function generateSalt() {
|
|
||||||
$maxCharIndex = count($this->CHARS) - 1;
|
|
||||||
$salt = '';
|
|
||||||
for ($i = 0; $i < self::SALT_LENGTH; ++$i) {
|
|
||||||
$salt .= $this->CHARS[mt_rand(0, $maxCharIndex)];
|
|
||||||
}
|
|
||||||
return $salt;
|
|
||||||
}
|
|
||||||
|
|
||||||
private static function initCharRange() {
|
|
||||||
return array_merge(range('0', '9'), range('a', 'f'));
|
|
||||||
}
|
|
||||||
|
|
||||||
}
|
|
||||||
@ -1,102 +0,0 @@
|
|||||||
<!--
|
|
||||||
This is a demo page for AuthMe website integration.
|
|
||||||
See AuthMeController.php and the extending classes for the PHP code you need.
|
|
||||||
-->
|
|
||||||
<!DOCTYPE html>
|
|
||||||
<html lang="en">
|
|
||||||
<head>
|
|
||||||
<title>AuthMe Integration Sample</title>
|
|
||||||
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
|
|
||||||
</head>
|
|
||||||
<body>
|
|
||||||
<?php
|
|
||||||
error_reporting(E_ALL);
|
|
||||||
|
|
||||||
require 'AuthMeController.php';
|
|
||||||
|
|
||||||
// Change this to the file of the hash encryption you need, e.g. Bcrypt.php or Sha256.php
|
|
||||||
require 'Sha256.php';
|
|
||||||
// The class name must correspond to the file you have in require above! e.g. require 'Sha256.php'; and new Sha256();
|
|
||||||
$authme_controller = new Sha256();
|
|
||||||
|
|
||||||
$action = get_from_post_or_empty('action');
|
|
||||||
$user = get_from_post_or_empty('username');
|
|
||||||
$pass = get_from_post_or_empty('password');
|
|
||||||
$email = get_from_post_or_empty('email');
|
|
||||||
|
|
||||||
$was_successful = false;
|
|
||||||
if ($action && $user && $pass) {
|
|
||||||
if ($action === 'Log in') {
|
|
||||||
$was_successful = process_login($user, $pass, $authme_controller);
|
|
||||||
} else if ($action === 'Register') {
|
|
||||||
$was_successful = process_register($user, $pass, $email, $authme_controller);
|
|
||||||
}
|
|
||||||
}
|
|
||||||
|
|
||||||
if (!$was_successful) {
|
|
||||||
echo '<h1>Login sample</h1>
|
|
||||||
This is a demo form for AuthMe website integration. Enter your AuthMe login details
|
|
||||||
into the following form to test it.
|
|
||||||
<form method="post">
|
|
||||||
<table>
|
|
||||||
<tr><td>Name</td><td><input type="text" value="' . htmlspecialchars($user) . '" name="username" /></td></tr>
|
|
||||||
<tr><td>Email</td><td><input type="text" value="' . htmlspecialchars($email) . '" name="email" /></td></tr>
|
|
||||||
<tr><td>Pass</td><td><input type="password" value="' . htmlspecialchars($pass) . '" name="password" /></td></tr>
|
|
||||||
<tr>
|
|
||||||
<td><input type="submit" name="action" value="Log in" /></td>
|
|
||||||
<td><input type="submit" name="action" value="Register" /></td>
|
|
||||||
</tr>
|
|
||||||
</table>
|
|
||||||
</form>';
|
|
||||||
}
|
|
||||||
|
|
||||||
function get_from_post_or_empty($index_name) {
|
|
||||||
return trim(
|
|
||||||
filter_input(INPUT_POST, $index_name, FILTER_UNSAFE_RAW, FILTER_REQUIRE_SCALAR | FILTER_FLAG_STRIP_LOW)
|
|
||||||
?: '');
|
|
||||||
}
|
|
||||||
|
|
||||||
|
|
||||||
// Login logic
|
|
||||||
function process_login($user, $pass, AuthMeController $controller) {
|
|
||||||
if ($controller->checkPassword($user, $pass)) {
|
|
||||||
printf('<h1>Hello, %s!</h1>', htmlspecialchars($user));
|
|
||||||
echo 'Successful login. Nice to have you back!'
|
|
||||||
. '<br /><a href="index.php">Back to form</a>';
|
|
||||||
return true;
|
|
||||||
} else {
|
|
||||||
echo '<h1>Error</h1> Invalid username or password.';
|
|
||||||
}
|
|
||||||
return false;
|
|
||||||
}
|
|
||||||
|
|
||||||
// Register logic
|
|
||||||
function process_register($user, $pass, $email, AuthMeController $controller) {
|
|
||||||
if ($controller->isUserRegistered($user)) {
|
|
||||||
echo '<h1>Error</h1> This user already exists.';
|
|
||||||
} else if (!is_email_valid($email)) {
|
|
||||||
echo '<h1>Error</h1> The supplied email is invalid.';
|
|
||||||
} else {
|
|
||||||
// Note that we don't validate the password or username at all in this demo...
|
|
||||||
$register_success = $controller->register($user, $pass, $email);
|
|
||||||
if ($register_success) {
|
|
||||||
printf('<h1>Welcome, %s!</h1>Thanks for registering', htmlspecialchars($user));
|
|
||||||
echo '<br /><a href="index.php">Back to form</a>';
|
|
||||||
return true;
|
|
||||||
} else {
|
|
||||||
echo '<h1>Error</h1>Unfortunately, there was an error during the registration.';
|
|
||||||
}
|
|
||||||
}
|
|
||||||
return false;
|
|
||||||
}
|
|
||||||
|
|
||||||
function is_email_valid($email) {
|
|
||||||
return trim($email) === ''
|
|
||||||
? true // accept no email
|
|
||||||
: filter_var($email, FILTER_VALIDATE_EMAIL);
|
|
||||||
}
|
|
||||||
|
|
||||||
?>
|
|
||||||
|
|
||||||
</body>
|
|
||||||
</html>
|
|
||||||
Loading…
x
Reference in New Issue
Block a user