Combat Persistence

Combat Persistence 🛡️

Combat Persistence is a professional-grade, 100% server-side Fabric mod for competitive Minecraft servers. It kills combat logging by spawning a vulnerable NPC whenever a player disconnects mid-fight — so closing the game is never an escape. It also ships a hardened, built-in authentication system to lock down offline-mode and cracked servers.

No client install required. Your players just connect and play.

⚔️ Combat Logging Protection

• Smart Combat Tagging — Players are tagged only on genuine PvP damage. Configurable duration with live action-bar feedback.
• Persistent NPCs — Disconnecting while tagged spawns a Mannequin NPC at your exact location that mirrors your skin, armor, and held items.
• Survives Anything — NPCs are backed by NBT data, so they persist through chunk unloads and full server restarts.
• Reliable Offline Deaths — If your NPC is slain while you’re away, you rejoin straight to the death screen. No ghost items, no survival glitches.
• Advanced Dupe Protection — Clears both the inventory and the cursor stack the instant you disconnect, closing the duplication exploits that plague other combat-log mods.
• Command Blocking — Stop players escaping a fight with /tp, /home, /spawn, /warp, /back, and any custom commands you add.

🔐 Built-in Secure Authentication

• BCrypt password hashing — Passwords are never stored in plaintext.
• Inventory & coordinate hiding — Until a player logs in, their inventory and location are concealed, so nobody joining under their name (a real risk in offline mode) can peek at their items or position.
• Brute-force lockout — Accounts lock after too many failed /login attempts for a configurable cooldown.
• Operator account reset — /authreset <player> lets staff wipe a forgotten/compromised account so the player can re-register.
• Conservative IP auto-login — Optional and off by default (IP auto-login is weak behind shared NAT / BungeeCord / Velocity proxies). Enable only on trusted direct-connect servers.
• Safe limbo — Unauthenticated players are held in a lobby with hidden coordinates to prevent world-leaking.

🪓 Arena / SMP Extras

• Ender chest toggle — Optionally disable ender chests server-wide (reliably blocked via mixin) so players can’t stash loot mid-fight on arena/SMP setups.

🆕 What’s New in 1.7.0

• ✅ Updated for Minecraft 26.2 (Java 25).
• 🔒 Patched offline-mode identity exploits (premium-name bypass, inventory exposure, login-fall).
• 🔑 Added operator account reset (/authreset) and hardened IP auto-login.
• 🪓 Added a toggle to disable ender chests for arena/SMP servers, now reliably blocked via mixin.
• 🛡️ Combat tags now trigger only on real player damage; skin identifiers are validated and Mojang fetches isolated from the common thread pool.
• 🔐 Added brute-force login lockout.

⌨️ Commands

| Command | Description |
| :— | :— |
| /register <password> <confirm> | Register your account. |
| /login <password> | Log in to your account. |
| /skin <name> | Apply a skin from a Mojang account name. |
| /authreset <player> | (Operator) Reset a player’s account so they must register again. |

🔧 Configuration

Everything lives in config/combatpersistence.json and generates on first launch. Highlights:

| Setting | Default | What it does |
| :— | :— | :— |
| combatTagDurationSeconds | 15 | Length of the combat tag. |
| blockedCommands | /spawn, /home, /tp, /tpa, /warp, /back | Commands disabled while tagged. |
| disableEnderChests | false | Block ender chests server-wide (arena/SMP). |
| enableAuth | true | Toggle the whole authentication system. |
| forceAuthInOfflineMode | true | Require auth even in offline mode. |
| enableIpAutoLogin | false | Optional IP-based auto-login (use only on trusted servers). |
| maxLoginAttempts / loginLockoutSeconds | 5 / 300 | Brute-force lockout threshold and cooldown. |
| sessionDurationHours | 24 | How long an auto-login session lasts. |
| hideInventoryBeforeAuth | true | Conceal inventory until login. |
| hideCoordinatesBeforeAuth | true | Conceal coordinates until login. |

All in-game messages are fully customizable (color codes supported).

📦 Requirements

• Fabric Loader + Fabric API
• Minecraft 26.2
• Java 25+

💎 Why Combat Persistence?

Built with an exploit-first mindset. We’ve manually patched duplication glitches (cursor stacks, inventory ghosting), offline-mode identity spoofing, and authentication bypasses that affect other similar mods. It uses ReentrantLock and background saving to stay thread-safe and lag-free under load.

❤️ Support

If this mod helps your server, you can support development here: ko-fi.com/pottersgame

Source Code · Issue Tracker · GPL-3.0 License