OPShield

[1.1.1] — 2026-03-11

Fixed

• Alias bypass (EssentialsX and other plugins): Non-OPs could use blocked commands via aliases (/gm, /gms, /tpa, /tphere, etc.) because the plugin compared only the typed text. Commands are now resolved to their canonical name via Bukkit's CommandMap before checking the block list, so aliases are caught automatically without needing to enumerate them in config.
• Non-OP players could not use /op <player> <password>: "op" was listed in blocked_commands, causing PlayerCommandPreprocessEvent to cancel the command before it ever reached onCommand. Password-based OP now works correctly for non-OP players.
• Password exposed in logs/latest.log: /op and /deop events were not cancelled before Bukkit logged them, so the password appeared in plain text in console output and log files. The event is now cancelled immediately and dispatched directly to onCommand internally.
• getRemainingLockoutTime showed inflated minutes: Integer division added an extra minute at every boundary (e.g. 5 seconds remaining showed "1 minute"). Fixed to ceiling division.