🚨 Changelog — LoginSystem Mod v2.1.0

v2.1.0 — The Ultimate Security & Stability Update 🚀

Supported Modloaders:

This massive update focuses on bulletproofing your server against data-loss, preventing malicious exploits, and eliminating unexpected server crashes, all while introducing a ground-breaking Web Administrative Dashboard!

🌐 The All-New Admin Web Dashboard

• Browser-Based Management: A complete browser-based administrative panel has been introduced! By visiting your server IP on your configured port, owners can now comprehensively manage their server from anywhere:
  • Live Monitoring: Monitor all registered accounts and instantly see who is currently online with live coordinates.
  • Remote Actions: Quickly Kick, Ban, Mute, or Unban players with the click of a button.
  • Live Web Inventories: View real-time player inventories dynamically mapped onto a visual Web UI grid without even being in the game!
  • Security Controls: Force-reset account passwords remotely.
  • Broadcasts: Send server-wide chat messages directly from the Web Interface.

🛡️ Major Security Features

• Double-Login / Name Spoofing Prevention (Offline Mode):
  • Critical Exploit Patched: Malicious users can no longer log in using an identical username (cracked clients) to kick out a legitimate online player before authentication!
  • Native Protections: Implemented deep surgical packet interception (Mixins for NeoForge, Reflection Hooks for Fabric) replacing the vanilla behavior that drops the original connection. The hacker is now kicked before they ever touch the server!
• BCrypt Password Overhaul:
  • Migrated all plain-text password algorithms to BCrypt (industry standard, Cost Factor 12).
  • Zero Downtime Migration: When old players log in, the mod automatically upgrades their passwords to BCrypt seamlessly and silently in the background!
• Admin UI Hardening:
  • Removed "View Passwords": Admins can no longer view plaintext passwords for users, guaranteeing player privacy.
  • Password Reset Generator: Alternatively to the Web Dashboard, Admins in-game can forcefully factory-reset a user's password to a random string which is sent exclusively to them in chat.

💾 Persistence & Data Safety

• Unlogged State Protection (Inventory/Location):
  • Ever had players lose their inventory because the server crashed before they typed /login? Fixed!
  • Player inventory and exact location coordinates are now securely saved to JSON/Database automatically at connection handshake, guaranteeing 100% item retention and void-falling prevention during unintended server restarts or disconnects.