AutoPlug | Automatic Updater for Plugins/Mods/Server/Java/Itself icon

AutoPlug | Automatic Updater for Plugins/Mods/Server/Java/Itself -----

First in the world, feature-rich, auto-updater, and server manager with web interface.




Version: 7.5.15
one of the most convenient plugins! It is very easy to install and use
thank you that it is free.

Version: 7.5.10
It works, though pretty much 50% of my spigot plugins aren't found, when they do exist on Spigot.. (except as expected, Github redirected ones aren't detected as well). Nice feature that old versions get deleted automatically as well. Good job!
-
Author's response
Sadly there are many things that make finding the plugins/mods (jar) ids harder:

- Authors do not provide the id inside the jar, which they can do btw.
- Authors provide author and plugin names in the jar that are different on the spigot post. In this case Autoplug even checks for similarity.
- Authors do not provide direct download links but forward to other html websites. In this case Autoplug provides alternative updating methods like Github/Jenkins.

Autoplugs database contains frequently used ids and metadata that you can find at the bottom of https://autoplug.one/stats and if you have a premium account that data is fetched and set in your plugin.yml file automatically.

Version: 7.5.10
I will update my review to 5 stars when there is a full 100% tutorial on how to set this up. The only tutorials I can find are AI-generated voice videos that hurt your ears just to listen to. I'm not hating at all I would love to use this plugin I am just not wasting my time because I have other things I need to be doing. There is not a single tutorial (yes there is a wiki) but no there is not a normal person actually explaining how to make this work. All in all the plugin may work according to you... but the setup process... there is no clear way to set this thing up and I just spent days trying to do this. I don't have any more time to waste on this so I am moving along to work on other things for the time being. If there was a premium paid alternative I could buy for let's say $20... and it was plug and play and worked I would 100% buy it... just a suggestion make a premium one to avoid the hassle of this weird setup you have now.
-
Author's response
It usually is a simple install, so plug-and-play.
It may be a bit more complicated on some restrictive hosts, but normally its just using the installer page, unpacking it into your server folder and running the start script.

If you have a restrictive host join the discord and search the help thread since there may have been people with the same issue, that got help for that particular host already.

Created a new video just for you: https://youtu.be/Vu9KRMb42HQ

Version: 7.3.4
Really great software, would be 5 stars if we could also download mods/plugins from github and plugins from modrinth and papermc hangar.

Version: 7.2.10
I spent two days trying to get this to work with no success. After reaching out to the discord *I must say they did try to help* In the end i was told error I have was unknown and no fix was offered. truly sucks since i was really looking forward to this plugin
-
Author's response
The only thing that didn't work for you was the automatic start on boot feature. Everything else worked fine, meaning you can manually set AutoPlug to start on boot, see guides for windows here: https://superuser.com/questions/954950/run-a-script-on-start-up-on-windows-10 and linux here: https://stackoverflow.com/questions/12973777/how-to-run-a-shell-script-at-startup

Version: 7.2.10
A super plugin. I used this plugin and it works very well, the developer is always active and the support is amazing.

Version: 6.1.1
CLI tool works decently. However does not seem to have a command to exit... .help does not yield an exit command either.

Please add a way to gracefully exit the CLI tool with a command, or add it to the .help command. Must be killed via process. CTRL+C doesn't work either.

Tested as a Linux CLI tool.
-
Author's response
.stop both or the short variant .stb is what you are looking for. Shown and explained in the .help command btw.

Version: 6.0.0
Can be quite a bit of initial setup, but after that its smooth sailing. Amazing plugin

Version: 5.12.0
Since I met this beautiful miracle, I have never stopped using it.
Thank you very much for this great solution.

Version: 5.11.0
I have a network with 11 servers + proxy and it was a huge effort to keep all plugins + the server.jar on each server in the latest version. AutoPlug has helped me to solve this problem. Generate files, install everything, connect to the web interface, done! It's really easy, I can recommend it to everyone, no matter if you have a single server or a whole network. The only problem it has is that it doesn't recognize all plugins yet, so you need to set them manually on each server, but after that you don't have to do anymore.

Version: 5.11.0
This is an amazing plugin. I am using it for my SMP server and have a premium membership. Thank you for making this! :)

Version: 5.11.0
This sounds good.
where should I have this file? in the plugin folder? I need ths
-
Author's response
After pressing the "Generate Files" button on the autoplug webpage you get detailed installation instructions.
If there are still open questions you can watch this tutorial video: https://www.youtube.com/watch?v=s0-PdBAd5O0 or join our discord group: https://discord.gg/GGNmtCC

Version: 5.9.5
What is the problem for the download of this plugin, is not possible download this plugin.
-
Author's response
AutoPlug is not a plugin but a server wrapper.
U probably missed the big blue "Generate Files" files button somehow, after getting redirected to autoplug/installer.

Version: 5.8.2
As server administrator one of the most annoying tasks is updating plugins and creating backups. One should do both often.
Autoplug does it both and also supports Github and Jenkins so you can have plugins updated even, when some developers take their time updating SpigotMC version of their product.

Overall - Autoplug is irreplaceable and literally THE MOST important solution in my server.

Version: 5.6.1
The idea is amazing and so far, I haven't found any issues, however, I'd die for having the possibility of running it offline (without having to trust the remote API/front combo at autoplug.one from going down), remote management is an amazing feature but I'd really love if it was possible to keep it local at my own will (even if that makes my server harder to manage from the outside).
-
Author's response
All of its features are available offline, so even when autoplug.one is down it won't affect the features you can use. The web service is entirely optional and a way for me to get paid, so If you want to have the web features running on your local pc/server that's not going to happen. Here is the full discussion: https://github.com/Osiris-Team/AutoPlug-Client/issues/40

Version: 5.2
Excellent plugin/server wrapper. Hope they continue to add awesome stuff to it. Allows for simple remote management and plugin updating

Version: 5.1.0
Best plugin online. Stability and automation all in one code, with one developer available for everything. I also recommend the premium version, nothing for such a plugin and as soon as I open a Network I will gladly upgrade to Premium.

Version: 5.0.9
Great plugin, only one question and that's how do I add non spigot plugins to it? Like essentials dev builds since they're external do I ALWAYS have to update it myself?
-
Author's response
Take a look at the /autoplug/plugins-config.yml

Version: 5.0.9
You are smarter than Elon Musk. This is the best plugin I have ever seen, No words just amazing!

Version: 5.0.2
This plugin is amazing in what it does. Already I love it and could not go without it. It makes me even more excited to see features like supporting Junkins, Github, and drive backups in the works on the development progress. The only problem I have had was completely my fault for setting it up wrong. I am excited to see where it goes and can't wait for Jinkins support in the feature.

Version: 5.0.2
** WONDERFUL ** plugin, the best ever among the free ones in circulation. Recommended 100/100 and working perfectly.

Support always available.

Version: 5.0.2
Amazing plugin, it automates all those tasks you need to do manually so you can save tons of time! The devs are very active, I issued some problems on GitHub and they instantly replied and released a new version to fix those bugs. You deserve 5 stars.

Version: 5.0.2
Took a while to set up, but this is the greatest program I've ever seen, It lets you essentially do anything you could ever need remotely, which is perfect for me, because I host my server myself, and I really needed something like this. if you are thinking about getting this, do not hesitate, this is amazing.

Version: 4.9
Amazing job.
Together we can do something that would allow users to copy the server template and wasn't linked only to SpigotMC
I hope we can cooperate ;)
Thanks for your review of my plugin

Version: 4.6
Alrighty soo imma give an honest review... Its bloody amazing. So when i saw this plugin i was like na man .. this is too good to be true maybe its a virus. But i was curious. so i made a ticket to the awesome revivenode staff... they said go for it but make a backup. I was a bit .spectical at first... But it works.. and its not even like a paid plugin. Thats the thing. Why is it not a paid plugin its so awesome... the world needs more people like yall(the devs and staff).
Ps: Maybe lower the web cooldown of 4 hours to some minutes

Version: 4.6
AutoPlug is a godsend for managing your server and keeps impressing me with all the new features being added. I don’t usually leave reviews like this but I really feel sorry for Osiris and all the other devs due to all the negative reviews from people that clearly did not read the installation instructions. You *need* to read them in their entirety, and absolutely expect to do a lot of configuring to get it to work exactly how you want it to. But once they’re set up, AutoPlug’s features make it so worthwhile - it just does so much! And if you do still have any issues, the devs are very nice and active on their Discord, and always listen to community feedback. Trust me, if you take the time to set this up *correctly*, you won’t go back!

Version: 4.4
I really think AutoPlug is what every server host should use, support plugin update, server update, backup of world/server/plugins, too many features to name them all here!

It will save you a lot of times! It's easy to properly setup AutoPlug if you don't rush it and read the documentations carefully.

The support on the Discord is outstanding, never seen such dedication to help and fix issues as fast as the author

Reviews under their are done by child that don't understand what this is intended for nor how does it work. It sad to see, but please author, does not lose hope on those shitty reviews.

Version: 4.0
Works very well, and updates all in matter of minutes.

However, dear author, in your own good, do not take on attacks on people just because they attack you. It won't make you shine, really. I love the plugin, but please, reputation is crucial. When I see an author attacking reviewers under, for whatever reason.. being it premium plugin, I won't buy it. Think about that.

Other than that, it's fantastic.
-
Author's response
Yeah, I'm not proud of that stuff either sometimes, but try to look at it from my point of view. You are working on a project daily for over a year now, fix bugs every day, add new features, try to optimize your product so that it fits almost everyone, and then a random 9yo kid walks by, clicks on download, and puts AutoPlug in the plugins directory without even bothering to read the first few sentences of the installation guide... And then writes a review where he says that AutoPlug doesn't work. Or even better they say I'm doing this, only to make some quick bucks and AutoPlug isn't free at all. OR they tell you, that your program is prone to remote code execution without even installing AutoPlug.
Sry but I don't have the nerves to stay calm and respond nicely to such stuff.

Version: 3.6
Very cool, to people saying its remote code execution, that feature is disabled by default (this program is open source so check yourself)

Version: 3.9
Works as described. Be aware: this is an ambitious, feature-rich server management front-end. If you're like me - strictly interested in the ability to keep your server's plugins automatically updated - expect that there will be a few features you'll want to tweak/disable. The devs are quick to respond to feedback in their discord, and react quickly to fix reported issues.

Version: 2.9
Got it running in about 2 minutes on my whole network.
Some plugins won't download. But if you configure them they got downloaded without any problems.

Version: 2.9
Niiceeee I love it

Also kiddos there is no "remote code execution" you need to enable it manually (For braindead kids)

Version: 2.6
Read instructions to install. Works flawlessly. All the reviewers here must be installing wrong. Also love the web integration.
-
Author's response
Thank you!
I almost lost hope in humanity.

Version: 2.6
Prone to remote code execution and the author does not make this clear at all on the plugin page
-
Author's response
Next time maybe actually use AutoPlug before writing a review, because then you'd realize that remote code execution is disabled by default.

Version: 2.6
It didn't update any of my plugins.

Furthermore, it's prone to remote code execution.

100% not recommend.
-
Author's response
Since you didn't even take a minute of your time to look into AutoPlug, I'm not going to do that either for this review and send you this pre-written text.
Pathetic.

Version: 1.30.3
seems good but the account confirmation email never reaches me, and i double checked the email address is correct
-
Author's response
That's odd. In v2.0 you can use all of AutoPlugs features without registering, but if you want to give it another try, I'm almost constantly online on Discord
and can help you with it.

Discord group: https://discord.gg/GGNmtCC
Pm: Osiris#9736

Version: 1.30.3
Does what it says, simple to use. Very helpful, saving me lots of time working on my small server with lots of plugins :) Couple quirks that need working out it seems but I'm on board looking forward to seeing how this develops. Figured I'd help balance out the reviews to counter a few idiots.
-
Author's response
Thanks!

Version: 1.30.3
It is not free... I don't why it is even here. Guy wnats to make a quick buck on minecraft players lol.
-
Author's response
AutoPlug is free. Next time read the installation steps properly before talking shit. Thank you.

Version: 1.30.3
I think the idea is great, but I use a self-hosted server manager, AMP by cubecoders(similar to multicraft) which is quite a bit more convenient to use, so is there a way to use this as a plugin rather than a server jar?
-
Author's response
Plugin update installation must be done while the server is offline, to ensure nothing goes wrong, that's why I can't make AutoPlug a regular plugin. You can use AutoPlug together with AMP though, there shouldn't be an issue with that.

Version: 1.20
Great Plugin, Setup is quite easy and to the point
The Support on their Official Discord server is Fast and Informative,
Would Highly Recommend this plugin for any small/big servers
which have many or small amounts of plugins which are just time
consuming to manually update.

Version: 1.20
Pretty good plugin, works perfectly as intended as is quite secure
‎‎‎‎‎‎‎‎‎‎‎‎‎‎‎

Version: 0.9.1
Good plugin, Ez to setup with the new update. It might be a hassle, but they have a great support system if something doesn't work. I would definitely recommend this plugin for anyone with a server.

Version: 0.9.1
Time Consuming, But it works. great plugin and I highly recommend it. The devs in the discord are super helpful

Version: 0.9.1
Looking at smpmc's Review, I HIGHLY recommend to stay away. Just update your plugins manually.
-
Author's response
Snpmc's review is already over half a year old and since then a lot has changed. I even can say that ALL security concerns mentioned by him have been fixed since v.0.9.
Below you find snpmc's statements, followed by the current facts.

"- Send your entire plugin list, without encryption, over the internet to the author’s server. This intent is not clearly stated in the description and it should be."
-> FALSE: AutoPlug uses SSL Sockets for every type of communication to the Webserver.

"- Download, install, and execute any code on your computer or server, from anywhere on the internet, as instructed by the author’s server, without any method of authenticating it."
-> FALSE: AutoPlug-Web never connects to your server, YOUR server connects via the AutoPlug-Client (open-source code/protocol) to OUR Web server. The protocol is open source and can be viewed by anyone on GitHub.

"As you are also providing your email and name for registration, you are placing an enormous amount of trust in the author. Allowing software to do risky tasks like this is not inherently bad, however such software must be designed for this. In my opinion it is immediately clear after brief review that no attempt was made to design this software to be safe for end-users to use. Some things I noticed during a brief review:"
- > NOTE: This review was already made some time ago and yes at the beginning the only aim was making AUTOPLUG WORK. But now AutoPlugs operates in the fastest and safest way possible and I'm really proud of how it is doing.

"- A hardcoded IP address is used, which prevents the author from changing the address that the software sends your data and receives instructions from if the server itself is breached, or if the IP address lease expires. There is no way for the user or author to fix this except manually updating the plugin, and no way to be alerted if this occurs."
-> TRUE: Hardcoded IP is indeed used, but I don't really see a security concern here.

"- No authentication or encryption is used for communication to the author’s server over the Internet. This allows the anybody obtaining access to the server or control of the IP address (instead of just the author) to read your information, or install any software on your machine."
-> FALSE: SSL Sockets are in use since v.0.9.

"- The daemon (“Client”) exposes it’s control port (35555) without an address binding, which allows any person with an Internet connection, and any other plugin, to send control messages and plugin lists to the daemon."
-> FALSE: AutoPlug does expose NOTHING. As already said YOUR server connects to OUR web-server which is WAITING for YOUR server to connect on OUR 35555 port.

"- Plugin to daemon communication is unauthenticated. This means that any plugin or service on the local machine or Internet can send plugin information to the Client, and any service listening on localhost:35556 can receive a list of plugins. At minimum, this communication should be authenticated. For example, the Client should pass a one-time key via process argument to the Server to authenticate requests."
-> FALSE: AutoPlug-Plugin has been removed in v.0.9.

"- No effort is made to verify the file that is downloaded. The software will download anything, with any size, and an `application/octet-stream` type and assume it is a JAR file. At an absolute minimum, the JAR file header size field, size reported by Spiget, and file download size should be compared as a rudimentary integrity check."
-> FALSE: Plugin downloads have severely improved since v.0.9.

Version: 0.9
The thing works, it's just that the process of getting it running and having to contact your host is not great. It is also hard for networks with multiple servers since it's not just a plug & play plugin.
-
Author's response
Thanks for your review. Yes you are right AutoPlugs first installation is quite time demanding, but in comparison to the time you save by the automation provided by AutoPlug I think it's worth it.

Version: 0.8
I can't set the plugin because the registration site doesn't work please solve ..
-
Author's response
Just released v0.9! Give it a try.

Version: 0.8
DON'T LEAVE BAD RENEW! THE PLUING HAS SOME ISSUES BUT THEY ARE WORING ON IT! I MIGHT GET FIXED IN THE NEXET WEEK
-
Author's response
Just released v0.9! Give it a try.

Version: 0.8
So far an amazing plugin, but sadly useless because of serious security concerns. The website's certificate hasn't been renewed for a while, giving me a very bad feeling about the plugin's overall security.
-
Author's response
Thanks for the review. We are upgrading our security standards in the next update. Sadly due to dependency issues, it will be delayed.

Version: 0.8
It wont work and it's crashing my server.
************************************************
-
Author's response
If you got crashes at least try to solve it first. There are multiple ways you can contact us. For example via discord, spigot, github or even e-mail. But don't leave a bad review without even giving us a chance to help you.

Version: 0.8
Honestly great plugin. According to the other commenters there are some risks involved, but I could care less if the author got op on my crappy little server with no one ever on it haha!

Really a cool plugin. Thank you my German friends!
-
Author's response
Haha, thanks <3 It's great to have some positive feedback now and then.

Version: 0.7
I strongly advise that you do not install this plugin on your server. The idea is great, but at it’s core, this plugin has a very high-risk method of operation:

- Send your entire plugin list, without encryption, over the internet to the author’s server. This intent is not clearly stated in the description and it should be.

- Download, install, and execute any code on your computer or server, from anywhere on the internet, as instructed by the author’s server, without any method of authenticating it.

As you are also providing your email and name for registration, you are placing an enormous amount of trust in the author. Allowing software to do risky tasks like this is not inherently bad, however such software must be designed for this. In my opinion it is immediately clear after brief review that no attempt was made to design this software to be safe for end-users to use. Some things I noticed during a brief review:

- A hardcoded IP address is used, which prevents the author from changing the address that the software sends your data and receives instructions from if the server itself is breached, or if the IP address lease expires. There is no way for the user or author to fix this except manually updating the plugin, and no way to be alerted if this occurs.

- No authentication or encryption is used for communication to the author’s server over the Internet. This allows the anybody obtaining access to the server or control of the IP address (instead of just the author) to read your information, or install any software on your machine.

- The daemon (“Client”) exposes it’s control port (35555) without an address binding, which allows any person with an Internet connection, and any other plugin, to send control messages and plugin lists to the daemon.

- Plugin to daemon communication is unauthenticated. This means that any plugin or service on the local machine or Internet can send plugin information to the Client, and any service listening on localhost:35556 can receive a list of plugins. At minimum, this communication should be authenticated. For example, the Client should pass a one-time key via process argument to the Server to authenticate requests.

- No effort is made to verify the file that is downloaded. The software will download anything, with any size, and an `application/octet-stream` type and assume it is a JAR file. At an absolute minimum, the JAR file header size field, size reported by Spiget, and file download size should be compared as a rudimentary integrity check.

Given the lack of effort to implement best practices in the “public” (client) part of the code, I have absolute zero trust in the “secret” part (the server), and you shouldn’t either.

I believe this plugin is dangerous, not by malice, but naivety.

I will update my review when this is redesigned to reduce the risk to servers this is installed on, either by open-sourcing and allowing end-users to run the server software, or by making design & implementation decisions that don’t require trust in a 3rd-party server.


*Any suggestions made are intended to provide context as to how this problem could be fixed in general, and are not advice to implement or change any part of this plugin specifically.
-
Author's response
Great, constructive review thank you a lot for taking so much time reviewing AutoPlug, that means us a lot ;)
We agree with you in all aspects, though some might be a bit exaggerated. Most of the issues you mentioned are already in our todo list and we invite all java fans to help us out, by contributing to the code: https://github.com/Osiris-Team/AutoPlug-Client

Have a nice day and stay healthy!

Version: 0.1
The plugin might work, and it might even be handy for a while, but as a server owner I strongly recommend avoiding this type of plugin on live servers.

-First of all, you shouldn't trust an external webpage to provide the plugins you use on your server:
If the authors were malicious, they could easily exploit your server, either using the server resources for something else, op-ing themselves, adding spyware, or whatever they'd like, and even if they weren't they could make a mistake, get their server infected, and infect you accidentaly.
--> if you use a plugin like this, they need to give you a way of selfhosting the update checking and dowloading platform

-Secondly, there are a lot of plugin updates that break plugin configurations, and sometimes even data storage. When an upgrade of that kind happens, you usually backup your data/config, and setup the new one , however if the update auto-applies, depending on the plugin, your server could be in great danger of being exploited, or just work incorrectly and anger/annoy/ loose the trust of the players unnecesairly
--> Its great to have a plugin to warn you about new updates, but you should read patchnotes before deciding when you want them applied.

-Thirdly, while we all love to have the latest features of all our plugins available, you shouldn't instantaniously update the plugins on a live server. You should test the plugin update on a test server to make sure everything is working correctly, or just wait a few and make sure no one reports any new bugs before updating.
Often times, a new version of the plugin comes out with a bug, and its fixed within a few days, if you wait and apply the working version, your server wil avoid a lot of problems.

And finally, specifically for this plugin, the server they host and use for update checking doesn't even have an SSL certificate, its a basic step for security and privacy is really easy to setup. If they don't worry about such a basic feature, how can you be sure they took care about the more complex and important ones?

I appreciate the spirit of the plugin, and you sharing it for free, but i'm afraid its a bit missguided. Maybe with a few tweaks it could be a really useful plugin, but right now it just shouldn't be used.
-
Author's response
First of all thank you for sharing your thoughts! You’re right in all what you’ve mentioned. The code for our autoplug client and autoplug plugin is available on github and we encourage you to check it for any malicious operations (though there aren’t any, its good to be careful these days). There are 2 resons why we didn’t want our users to have their own webserver. A webinterface like ours with that amount of data would slow down your server too much
and secondly the algorithm we use to search the plugins is the most precious part of this project and we want to keep that work for ourselves.
To refer to your first argument. Yes this plugin can do risky operations, like read/delete and moving files, but you have to enable them by yourself in the configs. Also the code for downloading the files is build in the plugin. Our server just passes over the download url as string and the whole download process is done by yourself. The download link is always shown in console and you can easily check for its authenticity.

To refer to your second argument. The only reason there is no backup function is lack of time. As you maybe noticed this is the first release and we focused on making the core-fuctions work, but a full server-backup system will also be included in a future release and be surely one of our main features/aims. Also you will be able to disable the auto-check feature for certain plugins in future (plugins, that may break if you update them).

Thank you again for your feedback. As already said, this is only the first version of a plugin with a lot of potential.
We hope to see more of this kind of comments! Have a nice day :)

Version: 0.1
Great idea! Pretty useful for those plugins that have no updater and still want to keep them up to date
-
Author's response
Thank you for this nice review <3

Resource Information
Author:
----------
Total Downloads: 30,381
First Release: May 6, 2020
Last Update: Sep 22, 2024
Category: ---------------
All-Time Rating:
49 ratings
Find more info at autoplug.one...
Version -----
Released: --------------------
Downloads: ------
Version Rating:
----------------------
-- ratings