hack my server about authmebungee

[sgdc3]

please describe your network structure

[KonoromiHimaries]

@sgdc3

timings - hub
https://timings.aikar.co/?id=96dbb0db1f1b4fadb483f8f853e61f51

travertine - bungee
https://ci.lucko.me/job/Travertine/

plugins - bungee

SkinsRestorer-v13.1.3.jar
ServerListPlus-3.4.7-Universal.jar
LuckPerms-Bungee-4.0.10.jar
BungeeTabListPlus-2.8.3-SNAPSHOT.jar
BungeeChat-2.1.6.855.jar
bungeeban-2.6.7.jar
BungeeAliases-1.1.4.jar
authmebungee-2.0.1-SNAPSHOT.jar

you can join to my server

mc.dragonsonline.pl

[sgdc3]

I mean the servers structure: lobbies, auth servers, minigames, etc... In which servers do you have authme installed?

[KonoromiHimaries]

any other server in my network has doesn't matter.

[sgdc3]

you need to put into the list any server that is running authmereloaded

[KonoromiHimaries]

ok. i disabled all of my servers without bungee and hub. hacker still can hack my server

example. hacker join ( without login ) on my account to server and use /end command
sarver has down! so easy. you can fix this? very please.

[sgdc3]

Please, post your bungee config (remove ip and ports) Also include your hub spigot.yml and your authme config.yml (remove mysql credentials)

[KonoromiHimaries]

Also include your hub spigot.yml

see in timings
https://timings.aikar.co/?id=96dbb0db1f1b4fadb483f8f853e61f51#config

bungee config

https://gist.github.com/KonoromiHimaries/c0cff2a1dedf16270993cb2330bb1f96

authme config

https://gist.github.com/KonoromiHimaries/7a09f161ba894a9c6b2c603ae4579b61

[sgdc3]

Server list is case sensitive, you need to call it Hub not hub @KonoromiHimaries

[KonoromiHimaries]

it's work, thx : D