LegionExploit 4.2-DEV

Eject players who enter with a local ip (0.0.0.0.0), new menu on plugin startup, new license.

Now you can censor the IP address of the operator that tries to have OP, so how do I apply this update without restarting all the files, just go to discord-webhook-alert.yml and add the new option show-ip: false, remember to download the new .jar of the plugin to have the improvement.

🚀 LegionExploit 3.0 Just arrived

• Webhook Now there are 3 types of webhooks, each of which has a brief explanation of what each does
• Pin via Webhook there are certain servers that have a turtle processor, it tends to saturate certain sectors therefore when you request an email it may take some time to arrive that's why a direct webhook for pin was released but keep in mind that this can be insecure so be careful who you give access to see the channel.
• IP Address All information provided on illegal entries, pin etc will show the actual ip of the player you are trying to verify, be careful when showing the channel to untrusted people as this shows the IP and can be sensitive.
• New notifications now you can edit each message in discord-webhook.yml each option has a summary of what they are for.

• Now you can customize the pin verification time (Default = 60 : seconds)

Why when I request the pin I get the message that I have 1 minute to use it, it is by default 60 seconds, but when I modify it the message will remain so you can ignore it.

✅ New update coming soon

• Accounts Now you can link your Minecraft username to an email where you will receive the PIN to log in whenever you want. It would look something like this:

Repo:

Player1: This would be the name of the first server owner, Player2 would be another owner. You can freely add the usernames of all your owners.

• BUG With the introduction of this new system, you might think this is a bug, but it’s not exactly. When you log in as an operator and haven’t entered the PIN command, an email will be sent to your linked account notifying you of unusual activity. The alert will only be sent to the linked account, not globally, since it would be odd if it did [but I’m still thinking whether to make it global or not].

• katapin The command can be used freely by players without requiring permissions. However, if you’re not on the account list, it will give you an error when trying to execute it, so don’t worry! [This may be modified, and only operators might be able to use this 100%].

• LuckPerms This will remain the same, the only difference is that a global notification will be sent to all operator accounts to notify that someone has violated the * of LuckPerms. [If you are affected by this, remember to add your name to the LuckPerms whitelist].

• AutoBan This will remain unchanged and will ban all accounts that are operators but not on the operator list.

• A system was created to directly ban operators who log in and are not added to the operator.yml list
• A new Discord webhook was implemented to send notifications about accounts banned for evading operator status and not being listed in operator.yml
• An error was fixed in the detection of blocked commands via the console, where certain commands like playerkits were being blocked due to containing pl in their name, which is blocked by default. This issue has now been resolved

- Alerts for Discord channels have been integrated via Discord webhook.
- A bug with LuckPerms has been fixed.
- Now, if unauthorized access is detected and access to * with LuckPerms is gained, you will receive a notification via Discord and Gmail.
- Now, when Force OP is detected, it will send a message to the Discord channel via webhook.
- New file discord-webhook-alert.yml where you can edit and customize messages for Discord webhook channels. Remember, to mention a ping, if it's @everyone just use @everyone, and if it's for a user, you should put <@USER ID>.

HTTPS FIX

The GET URL to request the license was successfully changed.

Licenses are now correctly linked to the official API. We have also added a plugin version check; if it is outdated, the plugin will automatically deactivate and provide you with a URL to download the latest version.

Folia compatibility was reverted because it reduced plugin performance by 300 percent. Only the performance update was kept, working 100 percent without errors.

Compatible server types - Spigot, Paper, Purpur, Bukkit

LegionExploit is now compatible with Paper, Spigot, Purpur, and FOLIA.
The project has expanded further, and a brief optimization has been added to the plugin's data handling.

• Now, if you give OP from the console while the player is disconnected, it will automatically force a deop on that account. Also, if you assign general permission with LuckPerms and the player is not active, their direct permission will be removed as well.

I’ve fixed a visual bug where the verification timer would occasionally display incorrectly, showing the countdown in a bugged sequence like 60 59 58 57 56, then jumping to 60 59 58 60 57 56 59. This has now been resolved. Additionally, if you don’t use LuckPerms, the plugin will continue to work. In version 2.1, if LuckPerms wasn’t installed, the plugin would shut down. Now everything will work perfectly.

The license policies have changed; you can now link any desired server by adding just the IP without the port. Please note that if you abuse this API, your access to the license will be completely revoked.

You can now add +10 server IPs with your license.

There are some plugins that force the use of a command even if it is blocked by LegionExploit when an operator is in verification state, such as CommandPanels. If you have a /warps command and use that command while it is blocked, LegionExploit will block it, but the other plugin will force the use of that command.

So, I opted to give higher priority to the events of LegionExploit, forcing the interruption of incoming commands from certain plugins like CommandPanels. "I CLARIFY that I don't know which other plugins may force commands," but this will be improved over time. For now, this blocks 79% of forced commands from most plugins.

I have also fixed an issue where, when you were an operator, it did not read the configured world, causing it not to teleport you and leaving you in the same area.