People can op themselves by just typing /op (theirname)

Discussion in 'Bukkit Help' started by StefanP, Dec 9, 2011.

Thread Status:
Not open for further replies.
  1. Offline

    StefanP

    1. What OS are you using (Brand and version - Ex. Windows XP SP3)?
    Ubuntu 10.10 64 bit.
    2. What architecture is the OS you are running (x64 or x86)?
    64 bit.
    3. What version and architecture is your java install? (Type: java -version in command prompt.)
    java version "1.6.0_26"

    4. Are you running any wrappers? McMyAdmin, mcadmin, Hamachi, etc?
    None, no-gui console.

    5. What build of CraftBukkit are you running? (do NOT say latest. Say the build number.)
    Build
    The build number is displayed in the top of the server.log.
    1572

    6. What command are you using to run your CraftBukkit server?
    java -Xmx4G -Xms4G -jar craftbukkit-1.0.0-SNAPSHOT.jar

    7. What plugins are you running?

    [INFO] Plugins: FalseBookBlock, FalseBookCore, PlgDisableCmd, ExactSpawn, ModTRS, BanHammer, PlgLogCmd, FalseBookIC, Lockette, CommandBook, iConomy, WorldEdit, RawcriticsOreObfuscationPluginSpout, HeroChat, StopTalkingAutoBan, Backup, WorldGuard, ControlTheExperience, FalseBookExtra, bPermissions, TimTheEnchanter, XcraftGate, NoCheat, VirtualChest, WorldBorder, HawkEye, Jail, ChestShop, OrebfuscatorSpoutBridge, Orebfuscator, ScriptBlock, HomeSpawnPlus, Permissions


    8. What error are you getting (post your server.log file)?

    I've had this problem with a lot of builds already, but up untill now have not had trouble with it, or perhaps have unknowingly.

    When people type /op (theirname) or something else? on our server they just get op handed over to them, it mostly turns into a huge griefing and usually the banning of my staff.

    9. What have you tried already?
    I've blocked the command by using PlgDisableCmd.
    I've made the ops.txt file unwritable.
    I've looked for plugins to remove operator completely.
    I've looked for similar threads.

    10. Have you tried any of the things below?
    No, but its definitely not that (at least, thats what I think).

    Appearantly only some can do it.
    Im expecting with a hacked client?

    EDIT by Moderator: merged posts, please use the edit button instead of double posting.
     
    Last edited by a moderator: May 22, 2016
  2. Offline

    hatstand

    Hacked clients can't force your server to run commands as an op. Make sure you aren't giving people permission to use /op. The nodes for that are in here (Lines 35, 36 & 37)
     
  3. Offline

    StefanP

    I've checked my list multiple times, even rewrote it and added negative nodes for giving op. Yet some people still got op and started griefing...
     
  4. Offline

    hatstand

    Could you post it here (In code tags)?
     
  5. Offline

    StefanP

  6. Offline

    codename_B

    Don't run an offline mode server then
     
  7. Offline

    StefanP

    That would be quite stupid. So no, I'm using online mode, not offline.
    The problem is that the plugin gives for a small amount of time op to you if you need to use an admin command, and people have used this small and supposidly safe time, to gain op.
     
  8. Offline

    Shereis

    It's now fixed ! Sorry for the mess !
     
Thread Status:
Not open for further replies.

Share This Page