OpGuard is a plugin that protects servers against op exploits & malicious plugins by maintaining a list of verified operators and overriding the default implementation of /op and /deop with its own command: /opguard.
OpGuard offers the ability to restrict access to /op (/opguard op) with a password, useful for keeping untrustworthy staff from setting op. It's also helpful in the event a malicious user somehow gains op or when a staff member has their account broken into; users who don't know the password won't be able to op other users when OpGuard is installed.
When compared to other "Anti-Forceop" plugins, OpGuard is the most feature-packed, configurable, and secure of all.
Require a password to op and deop players.
Passwords limit who can set op.
Remember: don't ever tell untrustworthy people the password!
Deny access to /op and /deop.
OpGuard denies all attempts at using /op and /deop, whether from players or console.
All op-related commands must be done through /opguard.
Players who don't have permission to use /op and /deop will see an "unknown command" error when they attempt to use either command.
Punish players that attempt to gain op.
Configure multiple punishment commands.
Hidden from /help, /?, and tab-completion.
If /plugins is disabled, players won't ever know this plugin is installed.
/opguard will display an "unknown command" message for players who don't have permission.
Extensive logging.
OpGuard keeps a log file for everything that happens with the plugin.
Logged items can be modified in the config.
Command: /opguard
Alias: /og
Usage:
Sets op for a player./opguard deop <player> <password (if set)>
If OpGuard's password is set, it must be included.
Removes op from a player./opguard list
If OpGuard's password is set, it must be included.
List all verified operators./opguard password <new password>
Set OpGuard's password./opguard reset <current password>
This will only work if OpGuard has no password set.
Removes OpGuard's password./opguard reload <password (if set)>
The current password must be correct to remove.
Reload OpGuard's config.
If OpGuard's password is set, it must be included.
OpGuard will check for updates (via Spiget) unless disabled in the config (set check-for-updates to false).
OpGuard submits anonymous metrics data to http://mcstats.org unless disabled in the config (set metrics to false).
Collected data is nonintrusive and includes the following:
