So lately I've been getting a lot of people on my server who are somehow able to login using any username, op their own accounts even though worldguard prevents the in-game op command and spawn in items that should be banned and confiscated when in their inventory. I have searched for many hours trying to find out how this is done so that I can find a way to patch it but haven't found anything useful. The latest thing to happen was someone who was able to spawn in tornado spawners even though they are banned and was able to grief my spawn using them.
If anyone knows how this is done or has a fix for it then please let me know. I would be very grateful.
My server is running AotBT version 1.0.12a with a mcpc plus server jar.