So, for the last two, or so, weeks, I've been sitting on some PHP code. I've emailed notch a few times about this but no reply. So, It's time for an official release.
So, what is this?
This allows you to make fake Minecraft accounts. This code is intended for server owners that aren't quite sure about some of their users.
If I apply this to my server, will normal users be able to play?
Yes! I spent time to make sure normal users will not be effected in any way.
Is this legal?
Not sure. The terms of service, for Minecraft, doesn't seem to be against this. I've read it countless times.
How do I use this?
First off, make sure you have all the files made. Second, make sure that your database information is set correctly. Third, goto /game/register.php, or "need an account" in Minecraft, and make an account. Forth, login to Minecraft.
Do I need to enable offline-mode?
No! :biggrin.gif:
Any bugs?
Not that I know of right now.
Requirements:
PHP 5 (what I locally have), MySQL, Apache
Will be working on the Lighttpd port for the next release. :biggrin.gif:
If you have any issues, post here. I'll be more then happy to help.
A lot of people are going to look at this and think - pirate - but actually, the first thing I noticed was the ability to lock the version - meaning you can prevent the client from updating (meaning you don't need to update your server)...
Might help server admins find those 2 days to fix everything that breaks everytime Notch does an update...
Would also give me the ability to log in as a pleb user and not an admin to test stuff...
Disclamer: I haven't actually tested that sending back a fixed version prevents the client from trying to update - in fact I've not even looked beyond the first few lines of the code
Or did I completely misread that code and description entirely?
A lot of people are going to look at this and think - pirate - but actually, the first thing I noticed was the ability to lock the version - meaning you can prevent the client from updating (meaning you don't need to update your server)...
Might help server admins find those 2 days to fix everything that breaks everytime Notch does an update...
Would also give me the ability to log in as a pleb user and not an admin to test stuff...
Disclamer: I haven't actually tested that sending back a fixed version prevents the client from trying to update - in fact I've not even looked beyond the first few lines of the code
Or did I completely misread that code and description entirely?
The version locking is an unintended use. But, that's a very good idea. I haven't tested that out but I will next time a patch rolls out.
To the "pirate" thing. People still have to get the Minecraft files from somewhere. This doesn't give you access to that. This doesn't bypass Amazon's S3 file security.
I'm not sure I understand the functionality and purpose of this.
Remember how Minecraft.net kept going down an there was free weekends? This is a system that could be used to protect from "free weekends" from happening on your server.
Another use case. Imagen you had a group of users you thought were hacking, but you couldn't prove it. Login with an account from this system, get in good with them and learn their secrets. You'll know whats going on but they won't have a clue. They'll just think you are some random person that joined.
I must be missing something stupid, but when I try this, it doesn't completely work for me. I get minecraft to recognize the account I created the with the register.php (so I can log in), but then it keeps wanting to download updated files even though I have the latest minecraft. And each time it does try to download the files, it fails at like 80%. My guess is that maybe the getversion.jsp isn't returning something for me that it should. The getversion.jsp also mentions a login_success.php file that I didn't see in your link.
I must be missing something stupid, but when I try this, it doesn't completely work for me. I get minecraft to recognize the account I created the with the register.php (so I can log in), but then it keeps wanting to download updated files even though I have the latest minecraft. And each time it does try to download the files, it fails at like 80%. My guess is that maybe the getversion.jsp isn't returning something for me that it should. The getversion.jsp also mentions a login_success.php file that I didn't see in your link.
Fixed. Just remember, you HAVE to have the current Minecraft files in order to login. This doesn't allow you to download those files.
I will not link it but google mineshafter. it is a minecraft.net authentication system replacement.
It allows users to upload skins etc... just like minecraft.net
HOWEVER, mineshafter requires all users to actually own (or create) an account on minecraft.net...
Raises a lot of red flags IMHO so I would not recommend anyone actually using it.
I will not link it but google mineshafter. it is a minecraft.net authentication system replacement.
It allows users to upload skins etc... just like minecraft.net
HOWEVER, mineshafter requires all users to actually own (or create) an account on minecraft.net...
Raises a lot of red flags IMHO so I would not recommend anyone actually using it.
Fixed. Just remember, you HAVE to have the current Minecraft files in order to login. This doesn't allow you to download those files.
Works great! thanks somken! And yah, I did have the latest files, as I do own the game, but it just kept wanting me to download for some reason. But again, your latest changes fixed this for me.
Sorry I was commenting on Mineshafter as a dubious altenative.
Your php looks clean.
But what Nano is suggesting is to add functionality to allow the server to host skins.
It's really easy to do... just requires a simple client class mod and perhaps a plugin to pull skins from client machines. Notch frowns on client mods so I won't be going into the details.
Fixed. Just remember, you HAVE to have the current Minecraft files in order to login. This doesn't allow you to download those files.
Works great! thanks somken! And yah, I did have the latest files, as I do own the game, but it just kept wanting me to download for some reason. But again, your latest changes fixed this for me.
Thanks!
Quote from Kaen »
Quote from somken »
Mineshafter or this is raises a lot of red flags?
Sorry I was commenting on Mineshafter as a dubious altenative.
Your php looks clean.
But what Nano is suggesting is to add functionality to allow the server to host skins.
It's really easy to do... just requires a simple client class mod and perhaps a plugin to pull skins from client machines. Notch frowns on client mods so I won't be going into the details.
Ya. I really don't feel like pissing Notch off. Lol.
This is a "Alternative MineCraft Login System" that functions like a proxy server redirecting logins to some other location instead of "MineCraft.net". (Another similar system is called MineShafter but that one is more for pirates and pretty dodgy)
With this, You can make fake accounts, steal people's names... etc....
and it works on servers running ONLINE-MODE=TRUE.
So what does this really do, like a list of features...? I'm lost.
This allows admins of servers to make "fake" accounts to try and trick users. This can be used in tracking down "hackers" by getting in close with them.
Quote from Kaen »
This is a "Alternative MineCraft Login System" that functions like a proxy server redirecting logins to some other location instead of "MineCraft.net". (Another similar system is called MineShafter but that one is more for pirates and pretty dodgy)
With this, You can make fake accounts, steal people's names... etc....
and it works on servers running ONLINE-MODE=TRUE.
This was NEVER intended to steal accounts. It's just a use case. I logged in as Notch just to show a skin we all knew and a name. That's the only reason I ever logged in as him.
Alternative login system that bypasses the verification servers and allows you to connect to your server as a name you desire.
Technically server owners who host a server for themselves and their friends to play on, could tell their friends who don't own minecraft, to use this alternative login system, to connect to their server, without having to buy the game. All they need is an up-to-date client, which they can get by simply sharing one real account amoungst their clique - Am I right?
Does it work if you also want to connect to a server, other than your own?
First part: Yes, this could happen. But, I'm hoping people don't use it that way.
Second part: No.
First part: Yes, this could happen. But, I'm hoping people don't use it that way.
Second part: No.
In regards to the second part, that's good. As for the first part; if people can, then they will.
I think your alternative login system is somewhat borderline in terms of being allowed, but that's just my opinion.
I don't see how its anything near to not being allowed in the ToS. There is an offline mode within Minecraft. That allows you to login to a server as anyone you want. This is just closes the gab between the two and gives server admins the best of both worlds.
Screenshots!
http://i.imgur.com/DsxCu.jpg
Skins!
http://i.imgur.com/NNa4h.jpg
Howto:
Quality is kinda shitty. Will redo if needed.
Download: https://dl.dropbox.com/u/2361780/zip/altlogin.zip
Update 5:
Updated version number to current.
Update 4:
Added client side skin support!
Update 3:
http://pastebin.com/DqPYcNxhFixed version number.
Update 2:
http://pastebin.com/Rgj7AjkAUpdated version number to current.
Update 1:
http://pastebin.com/Z7d2u7S6Changed an echo to return. It should of been return but I overlooked it.
Initial release:
http://pastebin.com/L6D8KrcdSo, what is this?
This allows you to make fake Minecraft accounts. This code is intended for server owners that aren't quite sure about some of their users.
If I apply this to my server, will normal users be able to play?
Yes! I spent time to make sure normal users will not be effected in any way.
Is this legal?
Not sure. The terms of service, for Minecraft, doesn't seem to be against this. I've read it countless times.
How do I use this?
First off, make sure you have all the files made. Second, make sure that your database information is set correctly. Third, goto /game/register.php, or "need an account" in Minecraft, and make an account. Forth, login to Minecraft.
Do I need to enable offline-mode?
No! :biggrin.gif:
Any bugs?
Not that I know of right now.
Requirements:
PHP 5 (what I locally have), MySQL, Apache
Will be working on the Lighttpd port for the next release. :biggrin.gif:
If you have any issues, post here. I'll be more then happy to help.
Todo:
Add more security to the login.
Might help server admins find those 2 days to fix everything that breaks everytime Notch does an update...
Would also give me the ability to log in as a pleb user and not an admin to test stuff...
Disclamer: I haven't actually tested that sending back a fixed version prevents the client from trying to update - in fact I've not even looked beyond the first few lines of the code
Or did I completely misread that code and description entirely?
The version locking is an unintended use. But, that's a very good idea. I haven't tested that out but I will next time a patch rolls out.
To the "pirate" thing. People still have to get the Minecraft files from somewhere. This doesn't give you access to that. This doesn't bypass Amazon's S3 file security.
Remember how Minecraft.net kept going down an there was free weekends? This is a system that could be used to protect from "free weekends" from happening on your server.
Another use case. Imagen you had a group of users you thought were hacking, but you couldn't prove it. Login with an account from this system, get in good with them and learn their secrets. You'll know whats going on but they won't have a clue. They'll just think you are some random person that joined.
Fixed. Just remember, you HAVE to have the current Minecraft files in order to login. This doesn't allow you to download those files.
or
make /game/skins/
folder on localhost
make a skin
/skins/username.png i think it is...
And load it from there...
I'm about 90% done with getting skins working. :tongue.gif:
(Note: Only skins for other players will be seen. Other players will see you as a default skin.)
It allows users to upload skins etc... just like minecraft.net
HOWEVER, mineshafter requires all users to actually own (or create) an account on minecraft.net...
Raises a lot of red flags IMHO so I would not recommend anyone actually using it.
Mineshafter or this is raises a lot of red flags?
Works great! thanks somken! And yah, I did have the latest files, as I do own the game, but it just kept wanting me to download for some reason. But again, your latest changes fixed this for me.
Sorry I was commenting on Mineshafter as a dubious altenative.
Your php looks clean.
But what Nano is suggesting is to add functionality to allow the server to host skins.
It's really easy to do... just requires a simple client class mod and perhaps a plugin to pull skins from client machines. Notch frowns on client mods so I won't be going into the details.
Thanks!
Ya. I really don't feel like pissing Notch off. Lol.
Edit: Video is up! YAY!
With this, You can make fake accounts, steal people's names... etc....
and it works on servers running ONLINE-MODE=TRUE.
This allows admins of servers to make "fake" accounts to try and trick users. This can be used in tracking down "hackers" by getting in close with them.
This was NEVER intended to steal accounts. It's just a use case. I logged in as Notch just to show a skin we all knew and a name. That's the only reason I ever logged in as him.
First part: Yes, this could happen. But, I'm hoping people don't use it that way.
Second part: No.
Link updated.
I don't see how its anything near to not being allowed in the ToS. There is an offline mode within Minecraft. That allows you to login to a server as anyone you want. This is just closes the gab between the two and gives server admins the best of both worlds.