WeGuardian

WeGuardian v2.3 – Changelog

Bug Fixes

Fixed `/unbanip` unbanning the incorrect IP* when a banned player’s account was previously used by another person Fixed `/unmuteip` resolving and removing the wrong IP address* Fixed `{player}` and `{staff}` placeholders not working in ban, kick, and mute screens* Fixed MiniMessage formatting not being parsed correctly when combined with legacy (`&`) and color codes* ---

New Features

Added `{player}` placeholder support* to all punishment screen messages (ban, kick, mute) Added `{staff}` placeholder support* to all punishment screen messages (ban, kick, mute) Added full MiniMessage support* alongside legacy color codes * Supports tags like <red>, <bold>, <gradient:red:blue> Added hex color support* in MiniMessage format * Example: <#FF5555> ---

Broadcast System

Added broadcast messages for all punishment types*, fully configurable via config.yml * Supported broadcasts: * Ban / Unban * Mute / Unmute * Kick * IP Ban / IP Unban * IP Mute / IP Unmute * All broadcast messages support placeholders: * {player}, {staff}, {reason}, {duration}, {expires}, {ip} ---

Improvements

Chat mute listener priority changed to `HIGHEST`* with ignoreCancelled = false → Ensures mutes are enforced over all other plugins Plugin now loads on STARTUP for earlier and safer initialization* IP punishments now store and resolve the original punished IP* from the punishment record instead of the player’s current IP ---

Config Updates

Updated `messages.ban.screen` to include `{player}` and `{staff}`* placeholders Updated `messages.kick.screen` to include `{staff}`* placeholder Updated `messages.mute.blocked` to include `{staff}`* placeholder Updated `messages.mute.applied` to include `{staff}`* placeholder Added broadcast sections for all punishment and IP punishment types*

WeGuardian v2.2 – Database & Security Fixes

Fixes & Improvements

* Fixed MySQL index creation issues (now fully compatible with MySQL & SQLite). * Punishment broadcast messages now correctly use messages.prefix from config.yml. * Resolved a critical IP-ban bypass issue allowing alt accounts to join. * Improved IP normalization (IPv4 & IPv6-mapped IPv4) * Fixed IP ban cache logic so new bans apply instantly

Notes

* No database migration required * No config or permission changes * Safe drop-in update

Each punishment type now requires its specific permission (weguardian.ban, weguardian.tempban, weguardian.mute, weguardian.tempmute, weguardian.kick) to be used through the GUI, matching the behavior of the command-based system.

WeGuardian

<p align="center"> <img src="https://img.shields.io/badge/Minecraft-1.21+-brightgreen" alt="Minecraft Version"> <img src="https://img.shields.io/badge/Java-21+-orange" alt="Java Version"> <img src="https://img.shields.io/badge/Paper-Supported-blue" alt="Paper Support"> <img src="https://img.shields.io/badge/Folia-Supported-purple" alt="Folia Support"> <img src="https://img.shields.io/badge/Version-2.0-red" alt="Plugin Version"> </p> <p align="center"> <b>Professional Punishment Management System for Minecraft Servers</b><br> <i>by WeThink</i> </p> ---

Features

Punishment System

- Ban & TempBan - Permanently or temporarily ban players - IP Ban & TempIP Ban - Ban players by IP address with automatic IP resolution - Mute & TempMute - Silence players permanently or temporarily - IP Mute & TempIP Mute - IP-based muting system - Kick - Instantly remove players from the server

Interactive GUI

- Punishment GUI - Beautiful and intuitive punishment selection interface - Duration Selector - Easy-to-use duration selection with presets - History Viewer - Browse punishment history with pagination

Database Support

- SQLite - Zero-configuration local storage (default) - MySQL - Scale to larger servers with MySQL support - HikariCP - High-performance connection pooling - Caffeine Caching - Lightning-fast data retrieval

Web Dashboard

- Built-in web panel for remote management - REST API for custom integrations - Configurable branding and appearance

Discord Integration

- Webhook logging for all punishments - Batched messages to avoid rate limits - Beautiful embed formatting

Performance

- Folia Support - Full compatibility with Folia servers - Async Operations - Non-blocking database operations - Lazy GUI Initialization - Optimized GUI performance ---

Installation

1. Download the latest WeGuardian.jar 2. Place it in your server's plugins folder 3. Restart your server 4. Configure plugins/WeGuardian/config.yml ---

Commands

| Command | Description | Permission | |---------|-------------|------------| | /ban <player> [reason] | Permanently ban a player | weguardian.ban | | /tempban <player> <duration> [reason] | Temporarily ban a player | weguardian.tempban | | /unban <player> | Unban a player | weguardian.unban | | /banip <player> [reason] | IP ban a player | weguardian.banip | | /tempbanip <player> <duration> [reason] | Temp IP ban a player | weguardian.tempbanip | | /unbanip <player> | Unban a player's IP | weguardian.unbanip | | /mute <player> [reason] | Permanently mute a player | weguardian.mute | | /tempmute <player> <duration> [reason] | Temporarily mute a player | weguardian.tempmute | | /unmute <player> | Unmute a player | weguardian.unmute | | /muteip <player> [reason] | IP mute a player | weguardian.muteip | | /tempmuteip <player> <duration> [reason] | Temp IP mute a player | weguardian.tempmuteip | | /unmuteip <player> | Unmute a player's IP | weguardian.unmuteip | | /kick <player> [reason] | Kick a player | weguardian.kick | | /punish <player> | Open punishment GUI | weguardian.punish | | /history <player> | View punishment history | weguardian.history | | /weguardian reload | Reload configuration | weguardian.admin | ---

Permissions

| Permission | Description | Default | |------------|-------------|---------| | weguardian.staff | All staff permissions | OP | | weguardian.admin | Admin commands (reload) | OP | | weguardian.bypass | Bypass all punishments | false | ---

Duration Format

Durations support the following formats: | Unit | Example | Description | |------|---------|-------------| | s | 30s | Seconds | | m | 30m | Minutes | | h | 6h | Hours | | d | 7d | Days | | w | 2w | Weeks | | M | 1M | Months | | y | 1y | Years | Examples: 1h, 6h, 1d, 7d, 30d, 90d ---

Configuration

Database (SQLite - Default)

database:
  type: "sqlite"
  sqlite:
    file: "punishments.db"

Database (MySQL)

database:
  type: "mysql"
  mysql:
    host: "localhost"
    port: 3306
    database: "weguardian"
    username: "root"
    password: "password"

Discord Webhook

discord:
  enabled: true
  webhook-url: "YOUR_WEBHOOK_URL"
  batch-interval-seconds: 5

Web Dashboard

web-dashboard:
  enabled: true
  host: "0.0.0.0"
  port: 8080
  admin-api-key: "YOUR_SECURE_KEY"

---

Requirements

- Minecraft Server: Paper 1.21+ or Folia - Java: 21 or higher ---

Dependencies

- [Paper API](https://papermc.io/) - Server API - [FoliaLib](https://github.com/TechnicallyCoded/FoliaLib) - Folia compatibility - [Caffeine](https://github.com/ben-manes/caffeine) - Caching - [HikariCP](https://github.com/brettwooldridge/HikariCP) - Connection pooling - [ACF](https://github.com/aikar/commands) - Command framework - [FastInv](https://github.com/MrMicky-FR/FastInv) - GUI framework - [bStats](https://bstats.org/) - Plugin metrics - [Javalin](https://javalin.io/) - Web framework ---

Support

For support and questions, join our Discord or open an issue on GitHub. ---

License

This project is licensed under the MIT License. See [LICENSE.md](LICENSE.md) for details. --- <p align="center"> Made with by <b>WeThink</b> </p>

Changelog

Fixes & Improvements

Fixed full tab completion* for smoother command usage. Reworked parts of the MySQL Database Manager* to improve performance and stability.

New Features

Added Alt Detection* to better track and manage alternate accounts.

Removed

The /stats* command has been removed.

Customizable Web Dashboard Header Changelog Added new option in config.yml under web-dashboard: web-dashboard: enabled: false web-header-title: "WeGuardian" You can now change the web header title from WeGuardian to your own name. This will be applied across all web pages.

Improved Web UI with various fixes Added support for tempipban, unbanip, and ipban commands Expanded Player Management section in the web panel Implemented automatic player IP fetching for punishments Added proper validation checks for temporary vs permanent punishments

Critical & High Severity Request/Response Mix-up – prevented user data from being sent to wrong users. Potential Remote Code Execution (RCE) – fixed vulnerability with partial PUT requests. DoS in multipart upload – mitigated Denial of Service attacks. TOCTOU Race Conditions – fixed Time-of-Check to Time-of-Use timing issues. Resource Shutdown Issues – corrected improper resource management. Regular Expression Denial of Service (ReDoS) – in TimeUtils.java, unsafe regex patterns fixed. Moderate & Low Severity Security constraint bypasses – ensured constraints cannot be bypassed. HTTP priority header DoS – mitigated potential Denial of Service via HTTP headers. CGI and rewrite rule bypasses – fixed vulnerabilities allowing rule circumvention. Unbounded Input Handling – limited maximum input length in time parsing. Unsafe Time Parsing – ensured integers are only parsed after regex validation.

Changelog Added: Website dashboard for easier management and monitoring. Fixed: All mute and temp-mute related errors. Improved: Compatibility with all chat-hover plugins. Fixed: All known issues for smoother performance and stability.

Fixed all major bugs related to bans and punishments. Improved stability and performance. A few minor issues remain, but they will be addressed shortly in upcoming patches.

Fixed multiple ban-related problems across the system Fixed TempMute Menu – Resolved an issue where, even after selecting duration and reason, the menu continued to prompt for duration selection. Alts Detection – Fixed alt detection system not trigger... fixed startup issues that some users experienced in allversions. This patch ensures smoother compatibility and better stability on both Paper and Folia servers.

This is the first stable release of WeGuardian, a lightweight and efficient security plugin for Minecraft servers. WeGuardian is a comprehensive, professional-grade Minecraft punishment system plugin designed for modern Paper/Bukkit and Folia servers. It provides a complete suite of moderation tools with GUI-driven interfaces, advanced punishment templates, cross-server synchronization, and MySQL support.

Key Features

Core Punishment System

- GUI-Driven Interface: Intuitive /punish <player> command opens comprehensive punishment center - Complete Punishment Types: Ban, Tempban, Mute, Tempmute, Kick, Warn, Unban, Unmute, Notes - IP-Based Punishments: IP bans, IP mutes with automatic player correlation - Smart Templates: Advanced punishment escalation system with auto-progression - Silent Punishments: Execute punishments without broadcasting with -s flag - Advanced Validation: Duplicate punishment prevention and permission hierarchy checks

Advanced Features

- Punishment Templates: Automated escalation system with configurable offense levels - Advanced Commands: /banlist, /mutelist, /alts, /blame, /warns, /unwarn - IP Correlation: Advanced alt account detection with shared IP analysis - Punishment History: Complete audit trail with clickable punishment IDs - Template Integration: Smart punishment progression based on player history - Rich Formatting: Adventure API with hover tooltips and clickable elements Installation: 1. Download the .jar file from the Releases page. 2. Place it in your server’s plugins folder. 3. Restart the server to activate WeGuardian. Compatibility: * Works with Paper/Spigot/Folia 1.21 and above * Requires Java 17+ or higher