trojanscan/trojanscan.c

   1 /*
   2  * Trojanscan version 2
   3  *
   4  * Trojanscan  copyright (C) Chris Porter 2002-2005
   5  * Newserv bits copyright (C) David Mansell 2002-2003
   6  *
   7  * TODO: CHECK::
   8  *   - Poke splidge about +r'ing bots, potential problems:
   9  *     - users might whine about T clone stealing account
  10  *       - would have to steal one already in use, so if trojans start using /msg q whois they'll see
  11  *       (though they have to be authed for this, they could use a clone of their own however)
  12  */
  13
  14 #include "trojanscan.h"
  15 #include "../lib/strlfunc.h"
  16 #include "../lib/version.h"
  17
  18 MODULE_VERSION(TROJANSCAN_VERSION " / $Id: trojanscan.c 663 2006-05-16 17:27:36Z newserv $")
  19
  20 void _init() {
  21   trojanscan_cmds = newcommandtree();
  22
  23   addcommandtotree(trojanscan_cmds, "showcommands", TROJANSCAN_ACL_UNAUTHED, 0, &trojanscan_showcommands);
  24   addcommandtotree(trojanscan_cmds, "help", TROJANSCAN_ACL_UNAUTHED, 1, &trojanscan_help);
  25   addcommandtotree(trojanscan_cmds, "hello", TROJANSCAN_ACL_UNAUTHED | TROJANSCAN_ACL_OPER, 1, &trojanscan_hello);
  26
  27   addcommandtotree(trojanscan_cmds, "join", TROJANSCAN_ACL_STAFF, 1, &trojanscan_userjoin);
  28   addcommandtotree(trojanscan_cmds, "chanlist", TROJANSCAN_ACL_STAFF, 0, &trojanscan_chanlist);
  29   addcommandtotree(trojanscan_cmds, "whois", TROJANSCAN_ACL_STAFF, 1, &trojanscan_whois);
  30
  31   addcommandtotree(trojanscan_cmds, "changelev", TROJANSCAN_ACL_STAFF | TROJANSCAN_ACL_OPER, 2, &trojanscan_changelev);
  32   addcommandtotree(trojanscan_cmds, "deluser", TROJANSCAN_ACL_TEAMLEADER | TROJANSCAN_ACL_OPER, 2, &trojanscan_deluser);
  33   addcommandtotree(trojanscan_cmds, "mew", TROJANSCAN_ACL_STAFF | TROJANSCAN_ACL_OPER, 2, &trojanscan_mew);
  34   addcommandtotree(trojanscan_cmds, "status", TROJANSCAN_ACL_STAFF | TROJANSCAN_ACL_OPER, 0, &trojanscan_status);
  35   addcommandtotree(trojanscan_cmds, "listusers", TROJANSCAN_ACL_TEAMLEADER, 0, &trojanscan_listusers);
  36
  37   addcommandtotree(trojanscan_cmds, "rehash", TROJANSCAN_ACL_WEBSITE, 0, &trojanscan_rehash);
  38
  39   addcommandtotree(trojanscan_cmds, "cat", TROJANSCAN_ACL_OPER, 1, &trojanscan_cat);
  40
  41   addcommandtotree(trojanscan_cmds, "reschedule", TROJANSCAN_ACL_DEVELOPER | TROJANSCAN_ACL_OPER, 0, &trojanscan_reschedule);
  42
  43   srand((int)time(NULL));
  44
  45   trojanscan_connect_schedule = scheduleoneshot(time(NULL) + 1, &trojanscan_connect, NULL);
  46 }
  47
  48 void _fini(void) {
  49   int i;
  50   struct trojanscan_realchannels *rp = trojanscan_realchanlist, *oldrp;
  51   struct trojanscan_rejoinlist *rj = trojanscan_schedulerejoins, *oldrj;
  52
  53   if (trojanscan_nick)
  54     deregisterlocaluser(trojanscan_nick, NULL);
  55
  56   if (trojanscan_connect_schedule)
  57     deleteschedule(trojanscan_connect_schedule, &trojanscan_connect, NULL);
  58
  59   if(trojanscan_schedule)
  60     deleteschedule(trojanscan_schedule, &trojanscan_dojoin, NULL);
  61
  62   if(trojanscan_poolschedule)
  63     deleteschedule(trojanscan_poolschedule, &trojanscan_repool, NULL);
  64
  65   if(trojanscan_cloneschedule)
  66     deleteschedule(trojanscan_poolschedule, &trojanscan_registerclones, NULL);
  67
  68   while(rp) {
  69     deleteschedule(rp->schedule, &trojanscan_dopart, (void *)rp);
  70     oldrp = rp;
  71     rp = rp->next;
  72     free(oldrp);
  73   }
  74
  75   while(rj) {
  76     deleteschedule(rj->schedule, &trojanscan_rejoin_channel, (void *)rj);
  77     freesstring(rj->channel);
  78     oldrj = rj;
  79     rj = rj->next;
  80     free(oldrj);
  81   }
  82
  83   if(trojanscan_initialschedule)
  84     deleteschedule(trojanscan_initialschedule, &trojanscan_fill_channels, NULL);
  85
  86   deleteschedule(trojanscan_rehashschedule, &trojanscan_rehash_schedule, NULL);
  87
  88   for (i=0;i<TROJANSCAN_CLONE_TOTAL;i++)
  89     if(trojanscan_swarm[i].clone) {
  90       deregisterlocaluser(trojanscan_swarm[i].clone, NULL);
  91       trojanscan_swarm[i].clone = NULL;
  92     }
  93   trojanscan_free_database();
  94   trojanscan_free_channels();
  95
  96   for (i=0;i<trojanscan_hostpoolsize;i++)
  97     freesstring(trojanscan_hostpool[i]);
  98
  99   for (i=0;i<trojanscan_tailpoolsize;i++)
 100     freesstring(trojanscan_tailpool[i]);
 101   trojanscan_database_close();
 102 }
 103
 104 void trojanscan_connect(void *arg) {
 105   sstring *mnick, *myident, *myhost, *myrealname, *myauthname;
 106   sstring *dbhost, *dbuser, *dbpass, *db, *dbport, *temp;
 107   channel *cp;
 108   int length, i;
 109   char buf[10];
 110
 111   trojanscan_connect_schedule = NULL;
 112
 113   for(i=0;i<TROJANSCAN_CLONE_TOTAL;i++)
 114     trojanscan_swarm[i].index = i; /* sure this could be done with pointer arithmetic... */
 115
 116   trojanscan_hostpoolsize = 0;
 117   trojanscan_tailpoolsize = 0;
 118   trojanscan_hostmode = 0;
 119   trojanscan_poolschedule = NULL;
 120   trojanscan_cloneschedule = NULL;
 121   trojanscan_realchanlist = NULL;
 122   trojanscan_database.glines = 0;
 123   trojanscan_database.detections = 0;
 124
 125   mnick = getcopyconfigitem("trojanscan", "nick", "T", NICKLEN);
 126   myident = getcopyconfigitem("trojanscan", "ident", "trojanscan", NICKLEN);
 127   myhost = getcopyconfigitem("trojanscan", "hostname", "trojanscan.slug.netsplit.net", HOSTLEN);
 128   myrealname = getcopyconfigitem("trojanscan", "realname", "Trojanscan v" TROJANSCAN_VERSION, REALLEN);
 129   myauthname = getcopyconfigitem("trojanscan", "authname", "T", ACCOUNTLEN);
 130
 131   dbhost = getcopyconfigitem("trojanscan", "dbhost", "localhost", HOSTLEN);
 132   dbuser = getcopyconfigitem("trojanscan", "dbuser", "", NICKLEN);
 133   dbpass = getcopyconfigitem("trojanscan", "dbpass", "", REALLEN);
 134   db = getcopyconfigitem("trojanscan", "db", "", NICKLEN);
 135
 136   dbport = getcopyconfigitem("trojanscan", "dbport", "3306", ACCOUNTLEN);
 137
 138   length = snprintf(buf, sizeof(buf) - 1, "%d", TROJANSCAN_DEFAULT_MAXCHANS);
 139   temp = getcopyconfigitem("trojanscan", "maxchans", buf, length);
 140
 141   trojanscan_maxchans = atoi(temp->content);
 142   freesstring(temp);
 143
 144   length = snprintf(buf, sizeof(buf) - 1, "%d", TROJANSCAN_DEFAULT_CYCLETIME);
 145   temp = getcopyconfigitem("trojanscan", "cycletime", buf, length);
 146
 147   trojanscan_cycletime = atoi(temp->content);
 148   freesstring(temp);
 149
 150   length = snprintf(buf, sizeof(buf) - 1, "%d", TROJANSCAN_DEFAULT_PARTTIME);
 151   temp = getcopyconfigitem("trojanscan", "parttime", buf, length);
 152   trojanscan_part_time = atoi(temp->content);
 153   freesstring(temp);
 154
 155   length = snprintf(buf, sizeof(buf) - 1, "%d", TROJANSCAN_DEFAULT_MAXUSERS);
 156   temp = getcopyconfigitem("trojanscan", "maxusers", buf, length);
 157   trojanscan_maxusers = atoi(temp->content);
 158   freesstring(temp);
 159
 160   length = snprintf(buf, sizeof(buf) - 1, "%d", TROJANSCAN_MINIMUM_HOSTS_BEFORE_POOL);
 161   temp = getcopyconfigitem("trojanscan", "minpoolhosts", buf, length);
 162   trojanscan_min_hosts = atoi(temp->content);
 163   freesstring(temp);
 164
 165   if ((trojanscan_cycletime / trojanscan_maxchans) < 1) {
 166     Error("trojanscan", ERR_FATAL, "Cycletime / maxchans < 1, increase cycletime or decrease maxchans else cycling breaks.");
 167     return; /* PPA: module failed to load */
 168   }
 169
 170   length = snprintf(buf, sizeof(buf) - 1, "%d", TROJANSCAN_DEFAULT_MINIMUM_CHANNEL_SIZE);
 171   temp = getcopyconfigitem("trojanscan", "minchansize", buf, length);
 172   trojanscan_minchansize = atoi(temp->content);
 173   freesstring(temp);
 174
 175   trojanscan_nick = registerlocaluser(mnick->content, myident->content, myhost->content, myrealname->content, myauthname->content, UMODE_SERVICE | UMODE_DEAF |
 176                                                                                                                           UMODE_OPER | UMODE_INV |
 177                                                                                                                           UMODE_ACCOUNT,
 178                                                                                                                           &trojanscan_handlemessages);
 179
 180   if (trojanscan_database_connect(dbhost->content, dbuser->content, dbpass->content, db->content, atoi(dbport->content)) < 0) {
 181     Error("trojanscan", ERR_FATAL, "Cannot connect to database host!");
 182     return; /* PPA: module failed to load */
 183   }
 184
 185   trojanscan_database_query("CREATE TABLE phrases (id INT(10) PRIMARY KEY AUTO_INCREMENT, wormid INT(10) NOT NULL, phrase TEXT NOT NULL, priority INT(10) DEFAULT 0 NOT NULL, dateadded int(10))");
 186   trojanscan_database_query("CREATE TABLE worms (id INT(10) PRIMARY KEY AUTO_INCREMENT, wormname TEXT NOT NULL, glinetype INT DEFAULT 0, data text, hitmsgs BOOL DEFAULT 1, hitchans BOOL DEFAULT 0, epidemic BOOL DEFAULT 0, privinfo text)");
 187   trojanscan_database_query("CREATE TABLE logs (id INT(10) PRIMARY KEY AUTO_INCREMENT, userid INT(10) NOT NULL, act TEXT NOT NULL, description TEXT NOT NULL, ts TIMESTAMP)");
 188   trojanscan_database_query("CREATE TABLE channels (id INT(10) PRIMARY KEY AUTO_INCREMENT, channel VARCHAR(%d) NOT NULL, exempt BOOL DEFAULT 0)", CHANNELLEN);
 189   trojanscan_database_query("CREATE TABLE users (id INT(10) PRIMARY KEY AUTO_INCREMENT, authname VARCHAR(%d) NOT NULL, authlevel TINYINT(4) NOT NULL)", ACCOUNTLEN);
 190   trojanscan_database_query("CREATE TABLE hits (id INT(10) PRIMARY KEY AUTO_INCREMENT, nickname VARCHAR(%d) NOT NULL, ident VARCHAR(%d) NOT NULL, host VARCHAR(%d) NOT NULL, phrase INT(10) NOT NULL, ts TIMESTAMP, messagetype VARCHAR(1) NOT NULL DEFAULT 'm', glined BOOL DEFAULT 1)", NICKLEN, USERLEN, HOSTLEN);
 191   trojanscan_database_query("CREATE TABLE settings (id INT(10) PRIMARY KEY AUTO_INCREMENT, setting VARCHAR(15) NOT NULL, value VARCHAR(15) NOT NULL)");
 192   trojanscan_database_query("CREATE TABLE wwwlogs (id INT(10) PRIMARY KEY AUTO_INCREMENT, authid INT(10) NOT NULL, ip VARCHAR(15), action TEXT, ts TIMESTAMP)");
 193   trojanscan_database_query("CREATE TABLE unknownlog (id INT(10) PRIMARY KEY AUTO_INCREMENT, data TEXT, user VARCHAR(%d) NOT NULL, ts TIMESTAMP)", NICKLEN+USERLEN+HOSTLEN+3);
 194
 195   trojanscan_database_query("DELETE FROM settings");
 196   trojanscan_database_query("INSERT INTO settings (setting, value) VALUES ('rehash','0')");
 197   trojanscan_database_query("INSERT INTO settings (setting, value) VALUES ('changed','0')");
 198
 199   trojanscan_read_database(1);
 200
 201   cp = findchannel(TROJANSCAN_OPERCHANNEL);
 202   if (!cp) {
 203     localcreatechannel(trojanscan_nick, TROJANSCAN_OPERCHANNEL);
 204   } else {
 205     if(!localjoinchannel(trojanscan_nick, cp))
 206       localgetops(trojanscan_nick, cp);
 207   }
 208
 209   cp = findchannel(TROJANSCAN_CHANNEL);
 210   if (!cp) {
 211     localcreatechannel(trojanscan_nick, TROJANSCAN_CHANNEL);
 212   } else {
 213     if(!localjoinchannel(trojanscan_nick, cp))
 214       localgetops(trojanscan_nick, cp);
 215   }
 216
 217   cp = findchannel(TROJANSCAN_PEONCHANNEL);
 218   if (!cp) {
 219     localcreatechannel(trojanscan_nick, TROJANSCAN_PEONCHANNEL);
 220   } else {
 221     if(!localjoinchannel(trojanscan_nick, cp))
 222       localgetops(trojanscan_nick, cp);
 223   }
 224
 225   freesstring(mnick);
 226   freesstring(myident);
 227   freesstring(myhost);
 228   freesstring(myrealname);
 229   freesstring(myauthname);
 230   freesstring(dbhost);
 231   freesstring(dbuser);
 232   freesstring(dbpass);
 233   freesstring(db);
 234   freesstring(dbport);
 235   trojanscan_registerclones(NULL);
 236
 237   trojanscan_rehashschedule = scheduleoneshot(time(NULL) + 60, &trojanscan_rehash_schedule, NULL);
 238
 239 }
 240
 241 void trojanscan_rehash_schedule(void *arg) {
 242   trojanscan_rehashschedule = scheduleoneshot(time(NULL) + 60, &trojanscan_rehash_schedule, NULL);
 243   if (!(trojanscan_database_query("SELECT value FROM settings WHERE setting = 'rehash'"))) {
 244     trojanscan_database_res *res;
 245     if ((res = trojanscan_database_store_result(&trojanscan_sql))) {
 246       if (trojanscan_database_num_rows(res) > 0) {
 247         trojanscan_database_row sqlrow = trojanscan_database_fetch_row(res);
 248         if (sqlrow && (sqlrow[0][0] == '1')) {
 249           trojanscan_mainchanmsg("n: rehash initiated by website. . .");
 250           trojanscan_read_database(0);
 251         }
 252       }
 253       trojanscan_database_free_result(res);
 254     }
 255   }
 256
 257 }
 258
 259 void trojanscan_free_database(void) {
 260   int i;
 261   for(i=0;i<trojanscan_database.total_channels;i++)
 262     freesstring(trojanscan_database.channels[i].name);
 263   free(trojanscan_database.channels);
 264   for(i=0;i<trojanscan_database.total_phrases;i++) {
 265     if (trojanscan_database.phrases[i].phrase)
 266       pcre_free(trojanscan_database.phrases[i].phrase);
 267     if (trojanscan_database.phrases[i].hint)
 268       pcre_free(trojanscan_database.phrases[i].hint);
 269   }
 270   free(trojanscan_database.phrases);
 271   for(i=0;i<trojanscan_database.total_worms;i++)
 272     freesstring(trojanscan_database.worms[i].name);
 273   free(trojanscan_database.worms);
 274   trojanscan_database.total_channels = 0;
 275   trojanscan_database.total_phrases = 0;
 276   trojanscan_database.total_worms = 0;
 277
 278 }
 279
 280 sstring *trojanscan_getsstring(char *string, int length) {
 281   int i;
 282
 283   for(i=0;i<length;i++) {
 284     if ((string[i] == '\r') || (string[i] == '\n')) {
 285       Error("trojanscan", ERR_WARNING, "Error reading %s at position %d, set to ERROR!", string, i+1);
 286       return getsstring("ERROR", sizeof("ERROR"));
 287     }
 288   }
 289
 290   return getsstring(string, length);
 291 }
 292
 293 int trojanscan_strip_codes(char *buf, size_t max, char *original) {
 294   int i, j, length = TROJANSCAN_MMIN(strlen(original), max-1);
 295   char *p2 = original, *p3, flag = 0;
 296   p3 = buf;
 297   for(i=0;i<length+1;i++) {
 298     switch (*p2) {
 299       case '\002':
 300       case '\017':
 301       case '\026':
 302       case '\037':
 303       break;
 304       case '\003':
 305         for(j=0;j<6;j++) {
 306           if ((i + 1) > length)
 307             break;
 308           if ((j == 4) && flag)
 309             break;
 310           p2++;
 311           i++;
 312           if ((j == 0) && (!((*p2 >= '0') && (*p2 <= '9'))))
 313             break;
 314           if (j == 1) {
 315
 316             if (*p2 == ',') {
 317                 if ((i + 1) > length)
 318                   break;
 319                 if (!((*(p2 + 1) >= '0') && (*(p2 + 1) <= '9')))
 320                   break;
 321               flag = 1;
 322             } else if ((*p2 >= '0') && (*p2 <= '9')) {
 323               flag = 0;
 324             } else {
 325               break;
 326             }
 327           }
 328           if (j == 2) {
 329             if (flag) {
 330               if (!((*p2 >= '0') && (*p2 <= '9')))
 331                 break;
 332             } else {
 333               if (*p2 != ',') {
 334                 break;
 335               } else {
 336                 if ((i + 1) > length)
 337                   break;
 338                 if (!((*(p2 + 1) >= '0') && (*(p2 + 1) <= '9')))
 339                   break;
 340               }
 341             }
 342           }
 343           if ((j == 3) && (!((*p2 >= '0') && (*p2 <= '9'))))
 344             break;
 345           if ((j == 4) && (!((*p2 >= '0') && (*p2 <= '9'))))
 346             break;
 347         }
 348         p2--;
 349         i--;
 350         break;
 351
 352       default:
 353         *p3 = *p2;
 354         p3++;
 355         break;
 356     }
 357     p2++;
 358   }
 359   return p3 - buf;
 360 }
 361
 362 struct trojanscan_worms *trojanscan_find_worm_by_id(int id) {
 363   int i;
 364   for(i=0;i<trojanscan_database.total_worms;i++)
 365     if ((trojanscan_database.worms[i].id == id))
 366       return &trojanscan_database.worms[i];
 367   return NULL;
 368 }
 369
 370 void trojanscan_read_database(int first_time) {
 371   const char *error;
 372   int erroroffset, i, tempresult;
 373
 374   trojanscan_database_res *res;
 375   trojanscan_database_row sqlrow;
 376
 377   if (!first_time) {
 378     trojanscan_free_database();
 379   } else {
 380     trojanscan_database.total_channels = 0;
 381     trojanscan_database.total_phrases = 0;
 382     trojanscan_database.total_worms = 0;
 383   }
 384
 385   if (!(trojanscan_database_query("SELECT channel, exempt FROM channels"))) {
 386     if ((res = trojanscan_database_store_result(&trojanscan_sql))) {
 387       trojanscan_database.total_channels = trojanscan_database_num_rows(res);
 388       if (trojanscan_database.total_channels > 0) {
 389         if ((trojanscan_database.channels = (trojanscan_channels *)malloc(sizeof(trojanscan_channels) * trojanscan_database.total_channels))) {
 390           if ((trojanscan_database.total_channels>0) && trojanscan_database.channels) {
 391             i = 0;
 392             while((sqlrow = trojanscan_database_fetch_row(res))) {
 393               trojanscan_database.channels[i].name = trojanscan_getsstring(sqlrow[0], strlen(sqlrow[0]));
 394               trojanscan_database.channels[i].exempt = (sqlrow[1][0] == '1');
 395               i++;
 396             }
 397           }
 398         }
 399       }
 400       trojanscan_database_free_result(res);
 401     }
 402   }
 403
 404   if (!(trojanscan_database_query("SELECT id, wormname, glinetype, length(data), hitmsgs, hitchans, epidemic FROM worms"))) {
 405     if ((res = trojanscan_database_store_result(&trojanscan_sql))) {
 406       trojanscan_database.total_worms = trojanscan_database_num_rows(res);
 407       if (trojanscan_database.total_worms > 0) {
 408         if ((trojanscan_database.worms = (trojanscan_worms *)malloc(sizeof(trojanscan_worms) * trojanscan_database.total_worms))) {
 409           i = 0;
 410           while((sqlrow = trojanscan_database_fetch_row(res))) {
 411             trojanscan_database.worms[i].id = atoi(sqlrow[0]);
 412             trojanscan_database.worms[i].name = trojanscan_getsstring(sqlrow[1], strlen(sqlrow[1]));
 413             tempresult = atoi(sqlrow[2]);
 414             trojanscan_database.worms[i].glineuser = (tempresult == 0);
 415             trojanscan_database.worms[i].glinehost = (tempresult == 1);
 416             trojanscan_database.worms[i].monitor = (tempresult == 2);
 417             if(sqlrow[3]) {
 418               trojanscan_database.worms[i].datalen = ((atoi(sqlrow[3]) == 0) ? 0 : 1);
 419             } else {
 420               trojanscan_database.worms[i].datalen = 0;
 421             }
 422
 423             trojanscan_database.worms[i].hitpriv = (atoi(sqlrow[4]) == 1);
 424             trojanscan_database.worms[i].hitchans = (atoi(sqlrow[5]) == 1);
 425             trojanscan_database.worms[i].epidemic = (atoi(sqlrow[6]) == 1);
 426
 427             i++;
 428           }
 429         }
 430       }
 431       trojanscan_database_free_result(res);
 432     }
 433   }
 434
 435   if (!(trojanscan_database_query("SELECT id, phrase, wormid FROM phrases ORDER BY priority DESC"))) {
 436     if ((res = trojanscan_database_store_result(&trojanscan_sql))) {
 437       trojanscan_database.total_phrases = trojanscan_database_num_rows(res);
 438       if (trojanscan_database.total_phrases > 0) {
 439         if ((trojanscan_database.phrases = (trojanscan_phrases *)malloc(sizeof(trojanscan_phrases) * trojanscan_database.total_phrases))) {
 440           i = 0;
 441           while((sqlrow = trojanscan_database_fetch_row(res))) {
 442             trojanscan_database.phrases[i].id = atoi(sqlrow[0]);
 443             trojanscan_database.phrases[i].worm = trojanscan_find_worm_by_id(atoi(sqlrow[2]));
 444             if (!(trojanscan_database.phrases[i].phrase = pcre_compile(sqlrow[1], PCRE_CASELESS, &error, &erroroffset, NULL))) {
 445               Error("trojanscan", ERR_WARNING, "Error compiling expression %s at offset %d: %s", sqlrow[1], erroroffset, error);
 446             } else {
 447               trojanscan_database.phrases[i].hint = pcre_study(trojanscan_database.phrases[i].phrase, 0, &error);
 448               if (error) {
 449                 Error("trojanscan", ERR_WARNING, "Error studying expression %s: %s", sqlrow[1], error);
 450                 pcre_free(trojanscan_database.phrases[i].phrase);
 451                 trojanscan_database.phrases[i].phrase = NULL;
 452               }
 453             }
 454             i++;
 455           }
 456         }
 457       }
 458       trojanscan_database_free_result(res);
 459     }
 460   }
 461
 462   trojanscan_database_query("UPDATE settings SET value = '0' where setting = 'rehash'");
 463
 464 }
 465
 466 void trojanscan_log(nick *np, char *event, char *details, ...) {
 467   int nickid = 0;
 468   char eevent[TROJANSCAN_QUERY_TEMP_BUF_SIZE], edetails[TROJANSCAN_QUERY_TEMP_BUF_SIZE], buf[513];
 469   va_list va;
 470
 471   va_start(va, details);
 472   vsnprintf(buf, sizeof(buf) - 1, details, va);
 473   va_end(va);
 474
 475   if (np)
 476     if (IsAccount(np))
 477       nickid = trojanscan_user_id_by_authname(np->authname);
 478
 479   trojanscan_database_escape_string(eevent, event, strlen(event));
 480   trojanscan_database_escape_string(edetails, buf, strlen(buf));
 481   trojanscan_database_query("INSERT INTO logs (userid, act, description) VALUES ('%d', '%s', '%s')", nickid, eevent, edetails);
 482 }
 483
 484 void trojanscan_generateclone(void *arg) {
 485   int i, loops = 0, modes = UMODE_XOPER | UMODE_INV;
 486   char c_nick[NICKLEN+1], c_ident[USERLEN+1], c_host[HOSTLEN+1], c_real[REALLEN+1];
 487   long fakeip;
 488
 489   i = (int)arg;
 490
 491   /* PPA: unlikely to be infinite */
 492   do {
 493     c_nick[0] = '\0';
 494     if (!loops && trojanscan_hostmode) /* only have one go at this */
 495       trojanscan_generatenick(c_nick, NICKLEN);
 496     if(!c_nick[0])
 497       trojanscan_gennick(c_nick, trojanscan_minmaxrand(7, TROJANSCAN_MMIN(13, NICKLEN)));
 498     loops++;
 499   } while ((getnickbynick(c_nick) != NULL));
 500
 501   trojanscan_generateident(c_ident, USERLEN);
 502   if(!c_ident[0])
 503     trojanscan_genident(c_ident, trojanscan_minmaxrand(4, TROJANSCAN_MMIN(8, USERLEN)));
 504
 505   if(trojanscan_hostmode) {
 506     trojanscan_generatehost(c_host, HOSTLEN, &fakeip);
 507     if(!c_host[0])
 508       trojanscan_genhost(c_host, HOSTLEN, &fakeip);
 509   } else {
 510     trojanscan_genhost(c_host, HOSTLEN, &fakeip);
 511   }
 512
 513   trojanscan_generaterealname(c_real, REALLEN);
 514   if(!c_real[0])
 515     trojanscan_genreal(c_real, trojanscan_minmaxrand(15, TROJANSCAN_MMIN(50, REALLEN)));
 516
 517   trojanscan_swarm[i].clone = registerlocaluser(c_nick, c_ident, c_host, c_real, NULL, modes, &trojanscan_clonehandlemessages);
 518   trojanscan_swarm[i].fakeip = fakeip;
 519
 520   if(trojanscan_swarm[i].clone && !trojanscan_swarm_created) {
 521     nick *np = trojanscan_selectuser();
 522     if(np) /* select a 'random' sign on time for whois generation */
 523       trojanscan_swarm[i].clone->timestamp = np->timestamp;
 524   }
 525   trojanscan_swarm[i].remaining = trojanscan_minmaxrand(5, 100);
 526
 527   trojanscan_swarm[i].sitting = 0;
 528
 529 }
 530
 531 void trojanscan_free_channels(void) {
 532   int i;
 533   if(trojanscan_chans) {
 534     for(i=0;i<trojanscan_activechans;i++)
 535       freesstring(trojanscan_chans[i].channel);
 536     free(trojanscan_chans);
 537     trojanscan_chans = NULL;
 538     trojanscan_activechans = 0;
 539   }
 540 }
 541
 542 void trojanscan_repool(void *arg) {
 543   if (trojanscan_generatepool() < TROJANSCAN_MINPOOLSIZE) {
 544     trojanscan_hostmode = 0;
 545     return;
 546   } else {
 547     trojanscan_hostmode = 1;
 548     trojanscan_poolschedule = scheduleoneshot(time(NULL) + TROJANSCAN_POOL_REGENERATION, &trojanscan_repool, NULL);
 549   }
 550 }
 551
 552 void trojanscan_registerclones(void *arg) {
 553   unsigned int i;
 554
 555   if (trojanscan_generatepool() < TROJANSCAN_MINPOOLSIZE) {
 556     trojanscan_hostmode = 0;
 557     trojanscan_cloneschedule = scheduleoneshot(time(NULL) + 10, &trojanscan_registerclones, NULL);
 558     return;
 559   } else {
 560     trojanscan_hostmode = 1;
 561     trojanscan_poolschedule = scheduleoneshot(time(NULL) + TROJANSCAN_POOL_REGENERATION, &trojanscan_repool, NULL);
 562     trojanscan_cloneschedule = NULL;
 563   }
 564
 565   for (i=0;i<TROJANSCAN_CLONE_TOTAL;i++)
 566     trojanscan_generateclone((void *)i);
 567   trojanscan_mainchanmsg("n: swarm (%d clones) created.", TROJANSCAN_CLONE_TOTAL);
 568   trojanscan_swarm_created = 1;
 569
 570   trojanscan_initialschedule = scheduleoneshot(time(NULL) + 5, &trojanscan_fill_channels, NULL);
 571 }
 572
 573 int trojanscan_status(void *sender, int cargc, char **cargv) {
 574   nick *np = (nick *)sender;
 575   trojanscan_log(np, "status", "");
 576   trojanscan_reply(np, "Channels in schedule: %d", trojanscan_activechans);
 577   trojanscan_reply(np, "Channels in database: %d", trojanscan_database.total_channels);
 578   trojanscan_reply(np, "Phrases: %d", trojanscan_database.total_phrases);
 579   trojanscan_reply(np, "Worms: %d", trojanscan_database.total_worms);
 580   trojanscan_reply(np, "Detections: %d", trojanscan_database.detections);
 581   trojanscan_reply(np, "Glines: %d", trojanscan_database.glines);
 582   trojanscan_reply(np, "Host/tail pool size: %d", TROJANSCAN_POOLSIZE);
 583   trojanscan_reply(np, "Cycletime: %d", trojanscan_cycletime);
 584   trojanscan_reply(np, "Clones: %d", TROJANSCAN_CLONE_TOTAL);
 585   return CMD_OK;
 586 }
 587
 588 int trojanscan_chanlist(void *sender, int cargc, char **cargv) {
 589   int i;
 590   nick *np = (nick *)sender;
 591   char buf[CHANNELLEN * 2 + 20];
 592   trojanscan_reply(np, "Channel list (%d total):", trojanscan_activechans);
 593   buf[0] = '\0';
 594
 595   for(i=0;i<trojanscan_activechans;i++) {
 596     if(trojanscan_chans[i].channel->length + 3 > sizeof(buf) - strlen(buf)) {
 597       trojanscan_reply(np, "%s", buf);
 598       buf[0] = '\0';
 599     }
 600
 601     /* if splidge sees this I'm going to die */
 602     strlcat(buf, trojanscan_chans[i].channel->content, sizeof(buf));
 603     strlcat(buf, " ", sizeof(buf));
 604   }
 605   if(buf[0])
 606     trojanscan_reply(np, "%s", buf);
 607
 608   trojanscan_reply(np, "Done.");
 609   return CMD_OK;
 610 }
 611
 612 int trojanscan_whois(void *sender, int cargc, char **cargv) {
 613   char *tochange;
 614   nick *np = (nick *)sender, *np2;
 615   int templevel;
 616
 617   if (cargc < 1) {
 618     trojanscan_reply(np, "Not enough parameters.");
 619     return CMD_ERROR;
 620   }
 621
 622   if (cargv[0][0] == '#') {
 623     tochange = cargv[0] + 1;
 624   } else {
 625     int i;
 626     np2 = getnickbynick(cargv[0]);
 627     if (!np2) {
 628       trojanscan_reply(np, "That nickname is not on the network.");
 629       return CMD_ERROR;
 630     }
 631     for(i=0;i<TROJANSCAN_CLONE_TOTAL;i++) {
 632       if(trojanscan_swarm[i].clone->nick && !ircd_strcmp(trojanscan_swarm[i].clone->nick, np2->nick)) {
 633         trojanscan_reply(np, "Nickname   : %s", np2->nick);
 634         trojanscan_reply(np, "Swarm      : yes", trojanscan_swarm[i].clone->nick);
 635         return CMD_OK;
 636       }
 637     }
 638     if (!IsAccount(np2)) {
 639       trojanscan_reply(np, "User is not authed.");
 640       return CMD_OK;
 641     }
 642     tochange = np2->authname;
 643   }
 644
 645   templevel = trojanscan_user_level_by_authname(tochange);
 646   if (templevel == -1) {
 647     trojanscan_reply(np, "User does not exist.");
 648   } else {
 649     union trojanscan_userlevel flags;
 650     flags.number = templevel;
 651     trojanscan_reply(np, "Authname   : %s", tochange);
 652     trojanscan_reply(np, "Flags      : +" TROJANSCAN_FLAG_MASK, TrojanscanFlagsInfo(flags));
 653   }
 654
 655   return CMD_OK;
 656 }
 657
 658 void trojanscan_privmsg_chan_or_nick(channel *cp, nick *np, char *message, ...) {
 659   char buf[513];
 660   va_list va;
 661
 662   if (!trojanscan_nick)
 663     return;
 664
 665   va_start(va, message);
 666   vsnprintf(buf, sizeof(buf) - 1, message, va);
 667   va_end(va);
 668
 669   if (cp) {
 670     sendmessagetochannel(trojanscan_nick, cp, buf);
 671   } else {
 672     sendmessagetouser(trojanscan_nick, np, buf);
 673   }
 674
 675 }
 676
 677 int trojanscan_mew(void *sender, int cargc, char **cargv) {
 678   nick *np = (nick *)sender, *np2 = NULL;
 679   channel *cp = NULL;
 680
 681   if (cargc < 2) {
 682     trojanscan_reply(np, "Not enough paramaters.");
 683     return CMD_ERROR;
 684   }
 685
 686   if(cargv[0][0] == '#') {
 687     if (!(cp = findchannel(cargv[0]))) {
 688       trojanscan_reply(np, "Channel not found.");
 689       return CMD_ERROR;
 690     }
 691     trojanscan_log(np, "mew", "%s %s", cp->index->name->content, cargv[1]);
 692   } else {
 693     if (!(np2 = getnickbynick(cargv[0]))) {
 694       trojanscan_reply(np, "Nickname is not present on the network.");
 695       return CMD_ERROR;
 696     }
 697     trojanscan_log(np, "mew", "%s %s", np2->nick, cargv[1]);
 698   }
 699
 700   trojanscan_privmsg_chan_or_nick(cp, np2, "\001ACTION mews hopefully at %s\001", cargv[1]);
 701
 702   if (cp) {
 703     trojanscan_reply(np, "Mewed at %s in %s.", cargv[1], cp->index->name->content);
 704   } else {
 705     trojanscan_reply(np, "Mewed at %s at %s.", cargv[1], np2->nick);
 706   }
 707   return CMD_OK;
 708 }
 709
 710 int trojanscan_cat(void *sender, int cargc, char **cargv) {
 711   nick *np = (nick *)sender, *np2 = NULL;
 712   channel *cp = NULL;
 713   FILE *cat;
 714   char buf[513], *p;
 715
 716   if (cargc < 1) {
 717     trojanscan_reply(np, "Not enough paramaters.");
 718     return CMD_ERROR;
 719   }
 720
 721   if(cargv[0][0] == '#') {
 722     if (!(cp = findchannel(cargv[0]))) {
 723       trojanscan_reply(np, "Channel not found.");
 724       return CMD_ERROR;
 725     }
 726     trojanscan_log(np, "cat", cp->index->name->content);
 727   } else {
 728     if (!(np2 = getnickbynick(cargv[0]))) {
 729       trojanscan_reply(np, "Nickname is not present on the network.");
 730       return CMD_ERROR;
 731     }
 732     trojanscan_log(np, "cat", np2->nick);
 733   }
 734
 735   if ((!(cat = fopen(TROJANSCAN_CAT, "r")))) {
 736     trojanscan_reply(np, "Unable to open cat!");
 737     return CMD_ERROR;
 738   }
 739
 740   while (fgets(buf, sizeof(buf) - 1, cat)) {
 741     if ((p = strchr(buf, '\n'))) {
 742       *p = '\0';
 743       trojanscan_privmsg_chan_or_nick(cp, np2, "%s", buf);
 744     } else if (feof(cat)) {
 745       trojanscan_privmsg_chan_or_nick(cp, np2, "%s", buf);
 746     }
 747   }
 748
 749   fclose(cat);
 750
 751   if (cp) {
 752     trojanscan_reply(np, "Spammed cat in %s.", cp->index->name->content);
 753   } else {
 754     trojanscan_reply(np, "Spammed cat at %s.", np2->nick);
 755   }
 756
 757   return CMD_OK;
 758 }
 759
 760 int trojanscan_reschedule(void *sender, int cargc, char **cargv) {
 761   nick *np = (nick *)sender;
 762   trojanscan_log(np, "reschedule", "");
 763   trojanscan_fill_channels(NULL);
 764
 765   trojanscan_reply(np, "Rescheduled.");
 766   return CMD_OK;
 767 }
 768
 769 int trojanscan_listusers(void *sender, int cargc, char **cargv) {
 770   nick *np = (nick *)sender;
 771
 772   trojanscan_log(np, "listusers", "");
 773
 774   trojanscan_reply(np, "User list:");
 775
 776   if (!(trojanscan_database_query("SELECT authname, authlevel FROM users ORDER BY authlevel DESC, authname"))) {
 777     trojanscan_database_res *res;
 778     if ((res = trojanscan_database_store_result(&trojanscan_sql))) {
 779       if (trojanscan_database_num_rows(res)) {
 780         trojanscan_database_row sqlrow;
 781         union trojanscan_userlevel flags;
 782         while((sqlrow = trojanscan_database_fetch_row(res))) {
 783           flags.number = atoi(sqlrow[1]);
 784           trojanscan_reply(np, "%s +" TROJANSCAN_FLAG_MASK, sqlrow[0], TrojanscanIsDeveloper(flags) ? "d" : "", TrojanscanIsTeamLeader(flags) ? "t" : "", TrojanscanIsStaff(flags) ? "s" : "", TrojanscanIsWebsite(flags) ? "w" : "", TrojanscanIsCat(flags) ? "c" : "");
 785         }
 786       }
 787       trojanscan_database_free_result(res);
 788     }
 789   }
 790
 791   trojanscan_reply(np, "Done.");
 792   return CMD_OK;
 793 }
 794
 795 int trojanscan_help(void *sender, int cargc, char **cargv) {
 796   nick *np = (nick *)sender;
 797
 798   if (cargc == 0) {
 799     trojanscan_reply(np, "Not enough parameters.");
 800     return CMD_ERROR;
 801   }
 802
 803   if (!strcasecmp("help", cargv[0])) {
 804     trojanscan_reply(np, "Syntax: help <command name>");
 805     trojanscan_reply(np, "Gives help on commands.");
 806   } else if (!strcasecmp("status", cargv[0])) {
 807     trojanscan_reply(np, "Syntax: status");
 808     trojanscan_reply(np, "Gives statistical information about the bot.");
 809   } else if (!strcasecmp("join", cargv[0])) {
 810     trojanscan_reply(np, "Syntax: join <#channel>");
 811     trojanscan_reply(np, "Orders a clone to join supplied channel.");
 812   } else if (!strcasecmp("showcommands", cargv[0])) {
 813     trojanscan_reply(np, "Syntax: showcommands");
 814     trojanscan_reply(np, "Pretty obvious.");
 815   } else if (!strcasecmp("hello", cargv[0])) {
 816     trojanscan_reply(np, "Syntax: hello ?nickname?");
 817     trojanscan_reply(np, "Creates a new user.");
 818   } else if (!strcasecmp("rehash", cargv[0])) {
 819     trojanscan_reply(np, "Syntax: rehash");
 820     trojanscan_reply(np, "Reloads bot database.");
 821   } else if (!strcasecmp("changelev", cargv[0])) {
 822     trojanscan_reply(np, "Syntax: changelev <nickname or #authname> <flags>");
 823     trojanscan_reply(np, "Changes access flags of selected user to supplied input.");
 824     trojanscan_reply(np, "+d -> developer");
 825     trojanscan_reply(np, "+t -> team leader");
 826     trojanscan_reply(np, "+s -> staff");
 827     trojanscan_reply(np, "+w -> web management");
 828     trojanscan_reply(np, "+c -> cat access");
 829   } else if (!strcasecmp("deluser", cargv[0])) {
 830     trojanscan_reply(np, "Syntax: deluser <nickname or #authname>");
 831     trojanscan_reply(np, "Deletes selected user from my database.");
 832   } else if (!strcasecmp("mew", cargv[0])) {
 833     trojanscan_reply(np, "Syntax: mew <#channel or nickname> <nickname>");
 834     trojanscan_reply(np, "Gracefully mews at target in selected channel or query.");
 835   } else if (!strcasecmp("cat", cargv[0])) {
 836     trojanscan_reply(np, "Syntax: cat <#channel or nickname>");
 837     trojanscan_reply(np, "Shows the almightly cat.");
 838   } else if (!strcasecmp("reschedule", cargv[0])) {
 839     trojanscan_reply(np, "Syntax: reschedule");
 840     trojanscan_reply(np, "Recalculates bots schedule.");
 841   } else if (!strcasecmp("chanlist", cargv[0])) {
 842     trojanscan_reply(np, "Syntax: chanlist");
 843     trojanscan_reply(np, "Displays bots current channel list.");
 844   } else if (!strcasecmp("whois", cargv[0])) {
 845     trojanscan_reply(np, "Syntax: whois <nickname or #authname>");
 846     trojanscan_reply(np, "Displays information on given user.");
 847   } else if (!strcasecmp("whois", cargv[0])) {
 848     trojanscan_reply(np, "Syntax: listusers <flags>");
 849     trojanscan_reply(np, "Displays users with listusersing flags.");
 850   } else {
 851     trojanscan_reply(np, "Command not found.");
 852     return CMD_ERROR;
 853   }
 854
 855   return CMD_OK;
 856 }
 857
 858 int trojanscan_hello(void *sender, int cargc, char **cargv) {
 859   nick *np = (nick *)sender, *toadd;
 860   char eaccount[TROJANSCAN_QUERY_TEMP_BUF_SIZE];
 861   int level = 0;
 862
 863   if (cargc > 0) {
 864     toadd = getnickbynick(cargv[0]);
 865     if (!toadd) {
 866       trojanscan_reply(np, "That nickname is not on the network.");
 867       return CMD_ERROR;
 868     }
 869     if (!IsAccount(toadd)) {
 870       trojanscan_reply(np, "That user is not authed with the network.");
 871       return CMD_ERROR;
 872     }
 873   } else {
 874     if (!IsAccount(np)) {
 875       trojanscan_reply(np, "You are not authed with the network, auth before creating your user.");
 876       return CMD_ERROR;
 877     }
 878     toadd = np;
 879   }
 880
 881   if (trojanscan_user_level_by_authname(toadd->authname)!=-1) {
 882     trojanscan_reply(np, "Authname (%s) is already on file.", toadd->authname);
 883     return CMD_ERROR;
 884   }
 885
 886   trojanscan_log(np, "hello", toadd->authname);
 887
 888   if (!(trojanscan_database_query("SELECT id FROM users LIMIT 1"))) {
 889     trojanscan_database_res *res;
 890     if ((res = trojanscan_database_store_result(&trojanscan_sql))) {
 891       if (trojanscan_database_num_rows(res) == 0)
 892         level = TROJANSCAN_ACL_DEVELOPER | TROJANSCAN_ACL_STAFF | TROJANSCAN_ACL_WEBSITE | TROJANSCAN_ACL_CAT;
 893       trojanscan_database_free_result(res);
 894     }
 895   }
 896
 897   trojanscan_database_escape_string(eaccount, toadd->authname, strlen(toadd->authname));
 898   trojanscan_database_query("INSERT INTO users (authname, authlevel) VALUES ('%s', %d)", eaccount, level);
 899   trojanscan_reply(np, "Account added to database, account %s%s.", toadd->authname, level>0?" (first user so developer access)":"");
 900
 901   return CMD_OK;
 902 }
 903
 904 int trojanscan_user_level_by_authname(char *authname) {
 905   int result = -1, sl = strlen(authname);
 906   char eaccount[TROJANSCAN_QUERY_TEMP_BUF_SIZE];
 907
 908   trojanscan_database_escape_string(eaccount, authname, sl);
 909   if (!(trojanscan_database_query("SELECT authlevel, authname FROM users WHERE authname = '%s'", eaccount))) {
 910     trojanscan_database_res *res;
 911     if ((res = trojanscan_database_store_result(&trojanscan_sql))) {
 912       if (trojanscan_database_num_rows(res) > 0) {
 913         trojanscan_database_row sqlrow = trojanscan_database_fetch_row(res);
 914         result = atoi(sqlrow[0]);
 915         strlcpy(authname, sqlrow[1], sl + 1);
 916       }
 917       trojanscan_database_free_result(res);
 918     }
 919   }
 920   return result;
 921 }
 922
 923 int trojanscan_user_id_by_authname(char *authname) {
 924   int result = 0;
 925   char eaccount[TROJANSCAN_QUERY_TEMP_BUF_SIZE];
 926
 927   trojanscan_database_escape_string(eaccount, authname, strlen(authname));
 928   if (!(trojanscan_database_query("SELECT id FROM users WHERE authname = '%s'", eaccount))) {
 929     trojanscan_database_res *res;
 930     if ((res = trojanscan_database_store_result(&trojanscan_sql))) {
 931       if (trojanscan_database_num_rows(res) > 0) {
 932         trojanscan_database_row sqlrow = trojanscan_database_fetch_row(res);
 933         result = atoi(sqlrow[0]);
 934       }
 935       trojanscan_database_free_result(res);
 936     }
 937   }
 938   return result;
 939 }
 940
 941 struct trojanscan_clones *trojanscan_selectclone(char type) {
 942   struct trojanscan_clones *rc;
 943   int randomclone, hits = 0, minlimit, maxlimit;
 944
 945   if(type == TROJANSCAN_WATCH_CLONES) {
 946     minlimit = TROJANSCAN_CLONE_MAX;
 947     maxlimit = minlimit + TROJANSCAN_WATCHCLONE_MAX - 1;
 948   } else {
 949     minlimit = 0;
 950     maxlimit = TROJANSCAN_CLONE_MAX - 1;
 951   }
 952
 953   do {
 954     randomclone = trojanscan_minmaxrand(minlimit, maxlimit);
 955     if (hits++ > 200)
 956       return NULL;
 957     rc = &trojanscan_swarm[randomclone];
 958     if ((type == TROJANSCAN_NORMAL_CLONES) && (rc->sitting == 0) && (rc->remaining == 0))
 959       break;
 960
 961   } while (rc->remaining == 0);
 962
 963   if(type == TROJANSCAN_NORMAL_CLONES) {
 964     if ((rc->sitting == 0) && (rc->remaining == 0)) {
 965       if ((!rc->remaining) && (!rc->sitting)) {
 966         if (rc->clone) {
 967           deregisterlocaluser(rc->clone, NULL);
 968           rc->clone = NULL;
 969         }
 970         trojanscan_generateclone((void *)rc->index);
 971       }
 972     }
 973   }
 974
 975   return rc;
 976
 977 }
 978
 979 /* hack hack hack */
 980 int trojanscan_nickbanned(trojanscan_clones *np, channel *cp) {
 981   int ret;
 982   long realip = np->clone->ipaddress;
 983
 984   np->clone->ipaddress = np->fakeip;
 985
 986   ret = nickbanned(np->clone, cp);
 987
 988   np->clone->ipaddress = realip;
 989
 990   return ret;
 991 }
 992
 993 struct trojanscan_realchannels *trojanscan_allocaterc(char *chan) {
 994   struct trojanscan_realchannels *rc;
 995   struct trojanscan_clones *clonep;
 996   channel *cp;
 997   int attempts_left = 10;
 998
 999   if (!chan) {
1000     trojanscan_errorcode = 1; /* sorry splidge ;( */
1001     return NULL;
1002   }
1003
1004   if(chan[0] != '#') {
1005     trojanscan_errorcode = 2;
1006     return NULL;
1007   }
1008
1009   if (strlen(chan) > 1) {
1010     if(strrchr(chan, ',')) {
1011       trojanscan_errorcode = 3;
1012       return NULL;
1013     }
1014
1015     if(strrchr(chan, ' ')) {
1016       trojanscan_errorcode = 4;
1017       return NULL;
1018     }
1019   }
1020
1021   cp = findchannel(chan);
1022   if (!cp) {
1023     trojanscan_errorcode = 5;
1024     return NULL;
1025   }
1026
1027   do {
1028     clonep = trojanscan_selectclone(TROJANSCAN_NORMAL_CLONES);
1029     if (!clonep) {
1030       trojanscan_errorcode = 6;
1031       return NULL;
1032     }
1033     if(!trojanscan_nickbanned(clonep, cp))
1034       break;
1035   } while (--attempts_left > 0);
1036
1037   if (!attempts_left) {
1038     trojanscan_errorcode = 7;
1039     return NULL;
1040   }
1041
1042   rc = (struct trojanscan_realchannels *)malloc(sizeof(struct trojanscan_realchannels));
1043
1044   rc->next = NULL;
1045   rc->clone = clonep;
1046   rc->chan = cp;
1047   rc->donotpart = 0;
1048   rc->kickedout = 0;
1049   return rc;
1050 }
1051
1052 void trojanscan_join(struct trojanscan_realchannels *rc) {
1053   struct trojanscan_realchannels *rp = trojanscan_realchanlist;
1054
1055   if (rc->clone && rc->clone->clone) {
1056     if (!localjoinchannel(rc->clone->clone, rc->chan)) {
1057       rc->clone->remaining--;
1058       rc->clone->sitting++;
1059       if (trojanscan_minmaxrand(1, TROJANSCAN_NICKCHANGE_ODDS)%TROJANSCAN_NICKCHANGE_ODDS == 0)
1060         trojanscan_donickchange((void *)rc->clone);
1061
1062       rc->schedule = scheduleoneshot(time(NULL)+trojanscan_part_time, &trojanscan_dopart, (void *)rc);
1063
1064       if (rp) {
1065         for(;rp->next;rp=rp->next);
1066         rp->next = rc;
1067       } else {
1068         trojanscan_realchanlist = rc;
1069       }
1070     }
1071   }
1072
1073 }
1074
1075 int trojanscan_userjoin(void *sender, int cargc, char **cargv) {
1076   nick *np = (nick *)sender;
1077   struct trojanscan_realchannels *rc;
1078
1079   if (cargc < 1) {
1080     trojanscan_reply(np, "Not enough paramaters");
1081     return CMD_ERROR;
1082   }
1083
1084   if (!trojanscan_swarm_created) {
1085     trojanscan_reply(np, "My swarm is currently empty.");
1086     return CMD_OK;
1087   }
1088
1089   if((rc = trojanscan_allocaterc(cargv[0]))) {
1090     trojanscan_log(np, "join", cargv[0]);
1091     trojanscan_join(rc);
1092     trojanscan_reply(np, "Clone has joined channel.");
1093     if(!IsOper(np))
1094       trojanscan_mainchanmsg("n: join: %s (%s/%s)", cargv[0], np->nick, np->authname);
1095   } else {
1096     if (trojanscan_errorcode == 5) {
1097       trojanscan_reply(np, "Not joining empty channel, check you entered the correct channel name.");
1098     } else {
1099       trojanscan_reply(np, "Clone could not join channel (error code %d)!", trojanscan_errorcode);
1100     }
1101   }
1102   return CMD_OK;
1103 }
1104
1105 int trojanscan_rehash(void *sender, int cargc, char **cargv) {
1106   nick *np = (void *)sender;
1107   trojanscan_read_database(0);
1108   trojanscan_log(np, "rehash", "");
1109   trojanscan_reply(np, "Done.");
1110   return CMD_OK;
1111 }
1112
1113 int trojanscan_changelev(void *sender, int cargc, char **cargv) {
1114   nick *np = (nick *)sender, *np2;
1115   int templevel;
1116   char eaccount[TROJANSCAN_QUERY_TEMP_BUF_SIZE], *tochange, *p, mode = 1, error = 0, clast = 0, specialcase;
1117   union trojanscan_userlevel flags1, flags2;
1118
1119   if (cargc < 2) {
1120     trojanscan_reply(np, "Not enough parameters.");
1121     return CMD_ERROR;
1122   }
1123
1124   templevel = trojanscan_user_level_by_authname(np->authname);
1125
1126   if (templevel == -1) {
1127     trojanscan_reply(np, "You do not have an account.");
1128     return CMD_ERROR;
1129   }
1130
1131   flags1.number = templevel;
1132
1133   if (cargv[0][0] == '#') {
1134     tochange = cargv[0] + 1;
1135   } else {
1136     np2 = getnickbynick(cargv[0]);
1137     if (!np2) {
1138       trojanscan_reply(np, "That nickname is not on the network.");
1139       return CMD_ERROR;
1140     }
1141     if (!IsAccount(np2)) {
1142       trojanscan_reply(np, "That user is not authed with the network.");
1143       return CMD_ERROR;
1144     }
1145     tochange = np2->authname;
1146   }
1147
1148   templevel = trojanscan_user_level_by_authname(tochange);
1149
1150   if (templevel == -1) {
1151     trojanscan_reply(np, "User does not exist.");
1152     return CMD_ERROR;
1153   }
1154
1155   flags2.number = templevel;
1156
1157   if (!ircd_strcmp(np->authname, tochange)) {
1158     specialcase = 1;
1159   } else {
1160     specialcase = 0;
1161   }
1162
1163   for (p=cargv[1];*p;p++) {
1164     switch (*p) {
1165       case '+':
1166       case '-':
1167         mode = (*p == '+');
1168         break;
1169       case 'd':
1170         if (!TrojanscanIsDeveloper(flags1))
1171           clast = 1;
1172         flags2.values.developer = mode;
1173         break;
1174       case 't':
1175         if (!TrojanscanIsDeveloper(flags1))
1176           clast = 1;
1177         flags2.values.teamleader = mode;
1178         break;
1179       case 's':
1180         if (!TrojanscanIsLeastTeamLeader(flags1))
1181           clast = 1;
1182         flags2.values.staff = mode;
1183         break;
1184       case 'w':
1185         if (!TrojanscanIsDeveloper(flags1))
1186           clast = 1;
1187         flags2.values.website = mode;
1188         break;
1189       case 'c':
1190         if (!TrojanscanIsDeveloper(flags1))
1191           clast = 1;
1192         flags2.values.cat = mode;
1193         break;
1194       default:
1195         error = 1;
1196         goto last;
1197         break;
1198     }
1199     if (clast == 1) {
1200       if (specialcase && !mode) { /* allow user to remove their own flags */
1201         clast = 0;
1202       } else {
1203         goto last;
1204       }
1205     }
1206   }
1207
1208   last:
1209   if (*p) {
1210     if (error) {
1211       trojanscan_reply(np, "Unknown mode: %c%c.", mode?'+':'-', *p);
1212     } else {
1213       trojanscan_reply(np, "You have insufficient privilidges to add/remove one or more flags specified.");
1214     }
1215     return CMD_ERROR;
1216   }
1217
1218   trojanscan_log(np, "changelev", "%s %s", tochange, cargv[1]);
1219   trojanscan_database_escape_string(eaccount, tochange, strlen(tochange));
1220   trojanscan_database_query("UPDATE users SET authlevel = %d WHERE authname = '%s'", flags2.number, eaccount);
1221
1222   trojanscan_reply(np, "Flags changed.");
1223
1224   return CMD_OK;
1225 }
1226
1227 int trojanscan_deluser(void *sender, int cargc, char **cargv) {
1228   nick *np = (nick *)sender, *to;
1229   int templevel;
1230   char eaccount[TROJANSCAN_QUERY_TEMP_BUF_SIZE], *account;
1231   union trojanscan_userlevel flags1, flags2;
1232
1233   if (cargc < 1) {
1234     trojanscan_reply(np, "Not enough parameters.");
1235     return CMD_ERROR;
1236   }
1237
1238   if (cargv[0][0] == '#') {
1239     account = cargv[0] + 1;
1240   } else {
1241     to = getnickbynick(cargv[0]);
1242     if (!to) {
1243       trojanscan_reply(np, "That nickname is not on the network.");
1244       return CMD_ERROR;
1245     }
1246     if (!IsAccount(to)) {
1247       trojanscan_reply(np, "That user is not authed with the network.");
1248       return CMD_ERROR;
1249     }
1250     account = to->authname;
1251   }
1252
1253   flags1.number = trojanscan_user_level_by_authname(np->authname);
1254   templevel = trojanscan_user_level_by_authname(account);
1255
1256   if (templevel == -1) {
1257     trojanscan_reply(np, "Auth %s does not exist.", account);
1258     return CMD_ERROR;
1259   }
1260
1261   flags2.number = templevel;
1262
1263   if (!TrojanscanIsDeveloper(flags1) && TrojanscanIsLeastTeamLeader(flags2)) {
1264       trojanscan_reply(np, "Your cannot delete %s as his/her flags equal or surpass your own.", account);
1265       return CMD_ERROR;
1266   }
1267
1268   trojanscan_log(np, "deluser", account);
1269   trojanscan_database_escape_string(eaccount, account, strlen(account));
1270   trojanscan_database_query("DELETE FROM users WHERE authname = '%s'", eaccount);
1271   trojanscan_reply(np, "User deleted.");
1272
1273   return CMD_OK;
1274 }
1275
1276 int trojanscan_add_ll(struct trojanscan_prechannels **head, struct trojanscan_prechannels *newitem) {
1277   struct trojanscan_prechannels *position, *lastitem = NULL, *location = NULL;
1278   if (!*head) {
1279     *head = newitem;
1280     newitem->next = NULL;
1281     if (newitem->exempt) {
1282       return 0;
1283     } else {
1284       return 1;
1285     }
1286   }
1287   /* if its exempt, we don't give a monkeys where it is... */
1288   if (newitem->exempt) {
1289     newitem->next = *head;
1290     *head = newitem;
1291     return 0;
1292   }
1293
1294   for(position=*head;position;lastitem=position,position=position->next) {
1295     if (!ircd_strcmp(position->name->content, newitem->name->content)) {
1296       free(newitem);
1297       return 0;
1298     }
1299     if (!location && (position->size < newitem->size)) {
1300       if (!lastitem) {
1301         location = *head;
1302       } else {
1303         location = lastitem;
1304       }
1305     }
1306   }
1307   if (!location) {
1308     newitem->next = NULL;
1309     lastitem->next = newitem;
1310   } else {
1311     newitem->next = location->next;
1312     location->next = newitem;
1313   }
1314   if(newitem->exempt) {
1315     return 0;
1316   } else {
1317     return 1;
1318   }
1319 }
1320
1321 void trojanscan_watch_clone_update(struct trojanscan_prechannels *hp, int count) {
1322   int i, j, marked;
1323   struct trojanscan_prechannels *lp;
1324   struct trojanscan_templist *markedlist = NULL;
1325
1326   if(count > 0) {
1327     markedlist = (struct trojanscan_templist *)calloc(count, sizeof(struct trojanscan_templist));
1328     if (!markedlist)
1329       return;
1330   }
1331
1332   for(i=0;i<trojanscan_activechans;i++) {
1333     marked = 0;
1334     if(markedlist) {
1335       for(lp=hp,j=0;j<count&&lp;j++,lp=lp->next) {
1336         if(!markedlist[j].active && !lp->exempt && !ircd_strcmp(lp->name->content, trojanscan_chans[i].channel->content)) { /* we're already on the channel */
1337           if(trojanscan_chans[i].watch_clone) {
1338             markedlist[j].active = 1;
1339             markedlist[j].watch_clone = trojanscan_chans[i].watch_clone;
1340             lp->watch_clone = trojanscan_chans[i].watch_clone;
1341           }
1342           marked = 1;
1343           break;
1344         }
1345       }
1346     }
1347     if(!marked && trojanscan_chans[i].watch_clone) {
1348       channel *cp = findchannel(trojanscan_chans[i].channel->content);
1349       if(cp)
1350         localpartchannel(trojanscan_chans[i].watch_clone->clone, cp);
1351     }
1352   }
1353
1354   if(!markedlist)
1355     return;
1356
1357   for(j=0,lp=hp;j<count&&lp;j++,lp=lp->next) {
1358     if((!markedlist[j].active || !markedlist[j].watch_clone) && !lp->exempt) {
1359       channel *cp = findchannel(lp->name->content);
1360       if(cp) {
1361         int attempts = 10;
1362         do {
1363           lp->watch_clone = trojanscan_selectclone(TROJANSCAN_WATCH_CLONES);
1364           if(!lp->watch_clone)
1365             break;
1366           if(!trojanscan_nickbanned(lp->watch_clone, cp)) {
1367             if(localjoinchannel(lp->watch_clone->clone, cp))
1368               lp->watch_clone = NULL;
1369             break;
1370           }
1371         } while(--attempts > 0);
1372         if(!attempts)
1373           lp->watch_clone = NULL;
1374
1375       }
1376     }
1377   }
1378
1379   free(markedlist);
1380 }
1381
1382 void trojanscan_fill_channels(void *arg) {
1383   struct trojanscan_prechannels *head = NULL, *lp, *last = NULL;
1384   int i, count, tempctime = 0;
1385
1386   chanindex *chn;
1387
1388   for (count=i=0;i<trojanscan_database.total_channels;i++) {
1389     lp = (trojanscan_prechannels *)malloc(sizeof(trojanscan_prechannels));
1390     lp->name = trojanscan_database.channels[i].name;
1391     lp->size = 65535;
1392     lp->exempt = trojanscan_database.channels[i].exempt;
1393     lp->watch_clone = NULL;
1394     if (trojanscan_add_ll(&head, lp))
1395       count++;
1396   }
1397
1398   for (i=0;i<CHANNELHASHSIZE;i++) {
1399     for(chn=chantable[i];chn;chn=chn->next) {
1400       if (chn->channel && !IsKey(chn->channel) && !IsInviteOnly(chn->channel) && !IsRegOnly(chn->channel) && (chn->channel->users->totalusers >= trojanscan_minchansize)) {
1401         lp = (trojanscan_prechannels *)malloc(sizeof(trojanscan_prechannels));
1402         lp->name = chn->name;
1403         lp->size = chn->channel->users->totalusers;
1404         lp->exempt = 0;
1405         lp->watch_clone = NULL;
1406         if (trojanscan_add_ll(&head, lp))
1407           count++;
1408       }
1409     }
1410   }
1411
1412   count = TROJANSCAN_MMIN(count, trojanscan_maxchans);
1413
1414   trojanscan_watch_clone_update(head, count);
1415
1416   trojanscan_free_channels();
1417   trojanscan_chans = (struct trojanscan_inchannel *)calloc(count, sizeof(struct trojanscan_inchannel));
1418   trojanscan_activechans = count;
1419   i = 0;
1420
1421   for(lp=head;lp;last=lp,lp=lp->next) {
1422     if (!(lp->exempt) && (i < count)) {
1423       trojanscan_chans[i].channel = getsstring(lp->name->content, lp->name->length);
1424       trojanscan_chans[i++].watch_clone = lp->watch_clone;
1425     }
1426     if (last)
1427       free(last);
1428   }
1429
1430   if (last)
1431     free(last);
1432
1433   if (trojanscan_activechans > 0) {
1434     tempctime = trojanscan_cycletime / trojanscan_activechans;
1435   } else {
1436     tempctime = 60;
1437     trojanscan_mainchanmsg("d: just escaped a divide by zero error (no activechans!), rescheduling in 60 seconds");
1438   }
1439
1440   if(trojanscan_schedule)
1441     deleteschedule(trojanscan_schedule, &trojanscan_dojoin, NULL);
1442
1443   trojanscan_channumber = 0;
1444
1445   trojanscan_schedule = schedulerecurring(time(NULL) + tempctime, trojanscan_activechans + 1, tempctime, trojanscan_dojoin, NULL);
1446
1447 }
1448
1449 void trojanscan_dojoin(void *arg) {
1450   struct trojanscan_realchannels *rc;
1451   if (trojanscan_channumber >= trojanscan_activechans) {
1452     trojanscan_schedule = NULL;
1453     trojanscan_fill_channels(NULL);
1454   } else {
1455     if ((rc = trojanscan_allocaterc(trojanscan_chans[trojanscan_channumber++].channel->content)))
1456       trojanscan_join(rc);
1457   }
1458 }
1459
1460
1461 void trojanscan_dopart(void *arg) {
1462   struct trojanscan_realchannels *rc = (struct trojanscan_realchannels *)arg, *rp, *past = NULL;
1463
1464   if (rc->kickedout) { /* there's a join scheduled, wait for it (reschedule) */
1465     rc->schedule = scheduleoneshot(time(NULL)+5, &trojanscan_dopart, (void *)rc);
1466     return;
1467   }
1468
1469   if (rc->clone->clone && (!(rc->donotpart)))
1470     localpartchannel(rc->clone->clone, rc->chan);
1471
1472   rc->clone->sitting--;
1473
1474   for(rp=trojanscan_realchanlist;rp;rp=rp->next) {
1475     if (rp == rc) {
1476       if (!past) {
1477         trojanscan_realchanlist = rp->next;
1478       } else {
1479         past->next = rp->next;
1480       }
1481       free(rp);
1482       break;
1483     }
1484     past = rp;
1485   }
1486
1487 }
1488
1489 void trojanscan_donickchange(void *arg) { /* just incase I choose to make this schedule at some point */
1490   struct trojanscan_clones *clone = (trojanscan_clones *)arg;
1491   if (clone && clone->clone) {
1492     char c_nick[NICKLEN+1];
1493     int loops = 0;
1494     /* PPA: unlikely to be infinite */
1495     do {
1496       if ((loops++ < 10) && trojanscan_hostmode) {
1497         trojanscan_generatenick(c_nick, NICKLEN);
1498       } else {
1499         trojanscan_gennick(c_nick, trojanscan_minmaxrand(7, TROJANSCAN_MMIN(13, NICKLEN)));
1500       }
1501     } while (c_nick && (getnickbynick(c_nick) != NULL));
1502
1503     renamelocaluser(clone->clone, c_nick);
1504   }
1505
1506 }
1507
1508 int trojanscan_keysort(const void *v1, const void *v2) {
1509   return ((*(trojanscan_prechannels **)v2)->size - (*(trojanscan_prechannels **)v1)->size);
1510 }
1511
1512 int trojanscan_showcommands(void *sender, int cargc, char **cargv) {
1513   nick *np = (nick *)sender;
1514   Command *cmdlist[100];
1515   int i, n;
1516   char level = 0;
1517
1518   n = getcommandlist(trojanscan_cmds, cmdlist, 100);
1519
1520   trojanscan_reply(np, "The following commands are registered at present:");
1521
1522   for(i=0;i<n;i++) {
1523     if (cmdlist[i]->level & TROJANSCAN_ACL_STAFF) {
1524       level = 's';
1525     } else if (cmdlist[i]->level & TROJANSCAN_ACL_DEVELOPER) {
1526       level = 'd';
1527     } else if (cmdlist[i]->level & TROJANSCAN_ACL_TEAMLEADER) {
1528       level = 't';
1529     } else if (cmdlist[i]->level & TROJANSCAN_ACL_CAT) {
1530       level = 'c';
1531     } else if (cmdlist[i]->level & TROJANSCAN_ACL_WEBSITE) {
1532       level = 'w';
1533     } else if (cmdlist[i]->level & TROJANSCAN_ACL_UNAUTHED) {
1534       level = 0;
1535     }
1536     if (level) {
1537       trojanscan_reply(np, "%s (+%c)", cmdlist[i]->command->content, level);
1538     } else {
1539       trojanscan_reply(np, "%s", cmdlist[i]->command->content);
1540     }
1541   }
1542   trojanscan_reply(np, "End of list.");
1543   return CMD_OK;
1544 }
1545
1546 void trojanscan_handlemessages(nick *target, int messagetype, void **args) {
1547   Command *cmd;
1548   char *cargv[50];
1549   int cargc, templevel;
1550   nick *sender;
1551   union trojanscan_userlevel level;
1552
1553   switch(messagetype) {
1554     case LU_PRIVMSG:
1555     case LU_SECUREMSG:
1556       /* If it's a message, first arg is nick and second is message */
1557       sender = (nick *)args[0];
1558
1559       if(strncmp(TROJANSCAN_VERSION_DETECT, args[1], sizeof(TROJANSCAN_VERSION_DETECT)-1)==0) {
1560         char p = ((char *)args[1])[sizeof(TROJANSCAN_VERSION_DETECT)-1];
1561         if((p == ' ') || (p == '\0') || (p == 1)) {
1562           trojanscan_reply(sender, "\001VERSION Trojanscan (or Tigger) Newserv module version %s by Chris Porter (slug), Newserv by David Mansell (splidge). Compiled " __DATE__ " " __TIME__ ".\001", TROJANSCAN_VERSION);
1563           return;
1564         }
1565       }
1566
1567       /* Split the line into params */
1568       cargc = splitline((char *)args[1], cargv, 50, 0);
1569
1570       cmd=findcommandintree(trojanscan_cmds, cargv[0], 1);
1571       if (!cmd) {
1572         trojanscan_reply(sender, "Unknown command.");
1573         return;
1574       }
1575
1576       if ((cmd->level & TROJANSCAN_ACL_OPER) && !IsOper(sender)) {
1577         trojanscan_reply(sender, "You need to be opered to use this command.");
1578         return;
1579       }
1580
1581       /* bit grim code... */
1582
1583       if (!(cmd->level & TROJANSCAN_ACL_UNAUTHED)) {
1584         if (!IsAccount(sender)) {
1585           trojanscan_reply(sender, "You must be authed with the network to access this command!");
1586           return;
1587         }
1588         templevel = trojanscan_user_level_by_authname(sender->authname);
1589
1590         if (templevel == -1) {
1591           trojanscan_reply(sender, "You do not have an account.");
1592           return;
1593         }
1594
1595         level.number = templevel;
1596
1597         if ((cmd->level & TROJANSCAN_ACL_DEVELOPER) && !TrojanscanIsDeveloper(level)) {
1598           trojanscan_reply(sender, "Access denied.");
1599           return;
1600         }
1601         if ((cmd->level & TROJANSCAN_ACL_TEAMLEADER) && !TrojanscanIsLeastTeamLeader(level)) {
1602           trojanscan_reply(sender, "Access denied.");
1603           return;
1604         }
1605         if ((cmd->level & TROJANSCAN_ACL_STAFF) && !TrojanscanIsLeastStaff(level)) {
1606           trojanscan_reply(sender, "Access denied.");
1607           return;
1608         }
1609         if ((cmd->level & TROJANSCAN_ACL_CAT) && !TrojanscanIsCat(level)) {
1610           trojanscan_reply(sender, "Access denied.");
1611           return;
1612         }
1613         if ((cmd->level & TROJANSCAN_ACL_WEBSITE) && !TrojanscanIsLeastWebsite(level)) {
1614           trojanscan_reply(sender, "Access denied.");
1615           return;
1616         }
1617       }
1618
1619       /* Check the maxargs */
1620       if (cmd->maxparams<(cargc-1)) {
1621         /* We need to do some rejoining */
1622         rejoinline(cargv[cmd->maxparams], cargc-(cmd->maxparams));
1623         cargc = (cmd->maxparams) + 1;
1624       }
1625
1626       (cmd->handler)((void *)sender, cargc - 1, &(cargv[1]));
1627       break;
1628
1629     case LU_KILLED:
1630       /* someone killed me?  Bastards */
1631       trojanscan_connect_schedule = scheduleoneshot(time(NULL) + 1, &trojanscan_connect, NULL);
1632       trojanscan_nick = NULL;
1633       break;
1634
1635     default:
1636       break;
1637   }
1638 }
1639
1640 char trojanscan_getmtfrommessagetype(int input) {
1641   switch(input) {
1642     case LU_PRIVMSG:    return 'm';
1643     case LU_PRIVNOTICE: return 'n';
1644     case LU_SECUREMSG:  return 's';
1645     case LU_CHANMSG:    return 'M';
1646     case LU_CHANNOTICE: return 'N';
1647     default:            return '?';
1648   }
1649 }
1650
1651 void trojanscan_clonehandlemessages(nick *target, int messagetype, void **args) {
1652   char *pretext = NULL, etext[TROJANSCAN_QUERY_TEMP_BUF_SIZE], enick[TROJANSCAN_QUERY_TEMP_BUF_SIZE], eident[TROJANSCAN_QUERY_TEMP_BUF_SIZE], ehost[TROJANSCAN_QUERY_TEMP_BUF_SIZE], text[513], detected = 0;
1653   nick *sender;
1654   struct trojanscan_realchannels *rp;
1655   struct trojanscan_rejoinlist *rj;
1656   unsigned int i, len;
1657   struct trojanscan_worms *worm;
1658   int vector[30];
1659   char mt = trojanscan_getmtfrommessagetype(messagetype);
1660   char *channel_name;
1661
1662   switch(messagetype) {
1663     case LU_PRIVMSG:
1664     case LU_SECUREMSG:
1665     case LU_PRIVNOTICE:
1666
1667     pretext = (char *)args[1];
1668
1669     case LU_CHANMSG:
1670     case LU_CHANNOTICE:
1671
1672       sender = (nick *)args[0];
1673       if (strlen(sender->nick) < 2)
1674         break;
1675
1676       if (!pretext)
1677         pretext = (char *)args[2];
1678
1679       if(strncmp(TROJANSCAN_VERSION_DETECT, pretext, sizeof(TROJANSCAN_VERSION_DETECT)-1)==0) {
1680         char p = pretext[sizeof(TROJANSCAN_VERSION_DETECT)-1];
1681         if((p == ' ') || (p == '\0') || (p == 1)) {
1682           int staff = 0;
1683           if (IsOper(sender)) {
1684             staff = 1;
1685           } else {
1686             if (IsAccount(sender)) {
1687               int templevel = trojanscan_user_level_by_authname(sender->authname);
1688               if (templevel != -1) {
1689                 union trojanscan_userlevel level;
1690                 level.number = templevel;
1691                 if (TrojanscanIsLeastStaff(level))
1692                   staff = 1;
1693               }
1694             }
1695           }
1696           if (staff) {
1697             if(trojanscan_nick) {
1698               sendnoticetouser(target, sender, "\001VERSION T clone, check T for confirmation.\001");
1699               sendnoticetouser(trojanscan_nick, sender, "\001VERSION %s is part of my swarm.\001", target->nick);
1700             } else {
1701               sendnoticetouser(target, sender, "\001VERSION T clone, though since T is currently gone you'll have to version me again in a minute for confirmation.\001");
1702             }
1703           } else {
1704             sendnoticetouser(target, sender,  "\001VERSION " TROJANSCAN_CLONE_VERSION_REPLY "\001");
1705           }
1706
1707           return;
1708         }
1709       }
1710
1711       trojanscan_strip_codes(text, sizeof(text) - 1, pretext);
1712
1713       len = strlen(text);
1714
1715       for(i=0;i<trojanscan_database.total_phrases;i++) {
1716         if (
1717              (
1718                (worm = trojanscan_database.phrases[i].worm)
1719              ) &&
1720              (
1721                (
1722                  (
1723                    (messagetype == LU_PRIVMSG) || (messagetype == LU_SECUREMSG) || (messagetype == LU_PRIVNOTICE)
1724                  ) &&
1725                  (
1726                    (trojanscan_database.phrases[i].worm->hitpriv)
1727                  )
1728                ) ||
1729                (
1730                  (
1731                    (messagetype == LU_CHANMSG) || (messagetype == LU_CHANNOTICE)
1732                  ) &&
1733                  (
1734                    (trojanscan_database.phrases[i].worm->hitchans)
1735                  )
1736                )
1737              ) &&
1738              (trojanscan_database.phrases[i].phrase)
1739            ) {
1740           int pre = pcre_exec(trojanscan_database.phrases[i].phrase, trojanscan_database.phrases[i].hint, text, len, 0, 0, vector, 30);
1741           if(pre >= 0) {
1742             char glinemask[HOSTLEN + USERLEN + NICKLEN + 4];
1743             char *userbit;
1744             host *hp;
1745             unsigned int j, usercount, frequency;
1746             char ip[TROJANSCAN_IPLEN];
1747             int glining = 1;
1748             channel *chp = (channel *)args[1];
1749
1750             nick *np = NULL; /* sigh at warnings */
1751
1752             detected = 1;
1753
1754             trojanscan_database.detections++;
1755
1756             if (!(hp=findhost(sender->host->name->content))) {
1757               trojanscan_mainchanmsg("w: user %s!%s@%s triggered infection monitor, yet no hosts found at stage 1 -- worm: %s", sender->nick, sender->ident, sender->host->name->content, worm->name->content);
1758               break;
1759             }
1760
1761             usercount = 0; /* stupid warnings */
1762             if (worm->monitor) {
1763               glining = 0;
1764               usercount = -1;
1765             } else if (worm->glinehost && (hp->clonecount <= TROJANSCAN_MAX_HOST_GLINE)) {
1766               snprintf(glinemask, sizeof(glinemask) - 1, "*@%s", trojanscan_iptostr(ip, sizeof(ip) - 1, sender->ipaddress));
1767               usercount = hp->clonecount;
1768             }
1769             else if (worm->glineuser || (worm->glinehost && hp->clonecount > TROJANSCAN_MAX_HOST_GLINE)) {
1770               userbit = sender->ident;
1771               if(userbit[0] == '~')
1772                 userbit++;
1773               snprintf(glinemask, sizeof(glinemask) - 1, "*%s@%s", userbit, trojanscan_iptostr(ip, sizeof(ip) - 1, sender->ipaddress));
1774               for (j=0;j<NICKHASHSIZE;j++) {
1775                 for (np=nicktable[j];np;np=np->next) {
1776                   if ((np->host==hp) && (!ircd_strcmp(np->ident,sender->ident)))
1777                     usercount++;
1778                 }
1779               }
1780             }
1781
1782             if (!usercount) {
1783               trojanscan_mainchanmsg("w: user %s!%s@%s triggered infection monitor, yet no hosts found at stage 2 -- worm: %s", sender->nick, sender->ident, sender->host->name->content, worm->name->content);
1784               break;
1785             }
1786
1787             if (glining && (usercount > trojanscan_maxusers)) {
1788               trojanscan_mainchanmsg("w: not glining %s!%s@%s due to too many users (%d) with mask: *!%s -- worm: %s)", sender->nick, sender->ident, sender->host->name->content, usercount, glinemask, worm->name->content);
1789               break;
1790             }
1791
1792             if (glining && !worm->datalen) {
1793               trojanscan_mainchanmsg("w: not glining %s!%s@%s due to too lack of removal data with mask: *!%s (%d users) -- worm: %s)", sender->nick, sender->ident, sender->host->name->content, glinemask, usercount, worm->name->content);
1794               break;
1795             }
1796
1797             trojanscan_database_escape_string(enick, sender->nick, strlen(sender->nick));
1798             trojanscan_database_escape_string(eident, sender->ident, strlen(sender->ident));
1799             trojanscan_database_escape_string(ehost, sender->host->name->content, sender->host->name->length);
1800
1801             frequency = 1;
1802
1803             if (!(trojanscan_database_query("SELECT COUNT(*) FROM hits WHERE glined = %d AND host = '%s'", glining, ehost))) {
1804               trojanscan_database_res *res;
1805               if ((res = trojanscan_database_store_result(&trojanscan_sql))) {
1806                 trojanscan_database_row sqlrow;
1807                 if ((trojanscan_database_num_rows(res) > 0) && (sqlrow = trojanscan_database_fetch_row(res)))
1808                   frequency = atoi(sqlrow[0]) + 1;
1809                 trojanscan_database_free_result(res);
1810               }
1811             }
1812
1813             if (!glining) {
1814               char matchbuf[513];
1815               matchbuf[0] = 0;
1816               matchbuf[512] = 0; /* hmm */
1817
1818               if(pre > 1)
1819                 if (pcre_copy_substring(text, vector, pre, 1, matchbuf, sizeof(matchbuf) - 1) <= 0)
1820                   matchbuf[0] = 0;
1821
1822               trojanscan_mainchanmsg("m: t: %c u: %s!%s@%s%s%s w: %s %s%s", mt, sender->nick, sender->ident, sender->host->name->content, mt=='N'||mt=='M'?" #: ":"", mt=='N'||mt=='M'?chp->index->name->content:"", worm->name->content, matchbuf[0]?" --: ":"", matchbuf[0]?matchbuf:"");
1823 /*              trojanscan_peonchanmsg("m: t: %c u: %s!%s@%s%s%s%s w: %s %s%s", mt, sender->nick, sender->ident, (IsHideHost(sender)&&IsAccount(sender))?sender->authname:sender->host->name->content, (IsHideHost(sender)&&IsAccount(sender))?"."HIS_HIDDENHOST:"", mt=='N'||mt=='M'?" #: ":"", mt=='N'||mt=='M'?chp->index->name->content:"", worm->name->content, matchbuf[0]?" --: ":"", matchbuf[0]?matchbuf:""); */
1824             } else {
1825               int glinetime = TROJANSCAN_FIRST_OFFENSE * frequency * (worm->epidemic?TROJANSCAN_EPIDEMIC_MULTIPLIER:1);
1826               if(glinetime > 7 * 24)
1827                 glinetime = 7 * 24; /* can't set glines over 7 days with normal non U:lined glines */
1828
1829               trojanscan_database_query("INSERT INTO hits (nickname, ident, host, phrase, messagetype, glined) VALUES ('%s', '%s', '%s', %d, '%c', %d)", enick, eident, ehost, trojanscan_database.phrases[i].id, mt, glining);
1830               trojanscan_database.glines++;
1831
1832               irc_send("%s GL * +%s %d :You (%s!%s@%s) are infected with a trojan (%s), see %s%d for details - banned for %d hours\r\n", mynumeric->content, glinemask, glinetime * 3600, sender->nick, sender->ident, sender->host->name->content, worm->name->content, TROJANSCAN_URL_PREFIX, worm->id, glinetime);
1833
1834               trojanscan_mainchanmsg("g: *!%s t: %c u: %s!%s@%s%s%s c: %d w: %s%s f: %d", glinemask, mt, sender->nick, sender->ident, sender->host->name->content, mt=='N'||mt=='M'?" #: ":"", mt=='N'||mt=='M'?chp->index->name->content:"", usercount, worm->name->content, worm->epidemic?"(E)":"", frequency);
1835             }
1836
1837             break;
1838           }
1839         }
1840       }
1841       if (!detected && (mt != 'N') && (mt != 'M')) {
1842         trojanscan_database_escape_string(etext, text, len);
1843         trojanscan_database_escape_string(enick, sender->nick, strlen(sender->nick));
1844         trojanscan_database_escape_string(eident, sender->ident, strlen(sender->ident));
1845         trojanscan_database_escape_string(ehost, sender->host->name->content, sender->host->name->length);
1846         trojanscan_database_query("INSERT INTO unknownlog (data, user) VALUES ('%s','%s!%s@%s')", etext, enick, eident, ehost);
1847       }
1848       break;
1849     case LU_KILLED:
1850       /* someone killed me?  Bastards */
1851
1852       /* PPA: we do NOT rejoin channels at this moment in time, it is possible to do this though */
1853       for (i=0;i<TROJANSCAN_CLONE_TOTAL;i++) {
1854         if (trojanscan_swarm[i].clone == target) {
1855
1856           scheduleoneshot(time(NULL)+1, &trojanscan_generateclone, (void *)i);
1857           if(i >= TROJANSCAN_CLONE_MAX) {
1858             int j;
1859             for(j=0;j<trojanscan_activechans;j++)
1860               if(trojanscan_chans[j].watch_clone == &trojanscan_swarm[i])
1861                 trojanscan_chans[j].watch_clone = NULL;
1862           } else {
1863             for(rp=trojanscan_realchanlist;rp;rp=rp->next)
1864               if ((rp->clone == &(trojanscan_swarm[i])))
1865                 rp->donotpart = 1;
1866           }
1867           trojanscan_swarm[i].clone = NULL;
1868           trojanscan_swarm[i].remaining = 0; /* bah */
1869           break;
1870         }
1871       }
1872       break;
1873
1874     case LU_KICKED:
1875       channel_name = ((channel *)args[1])->index->name->content;
1876       for (i=0;i<trojanscan_activechans;i++) {
1877         if (!trojanscan_chans[i].watch_clone)
1878           continue;
1879         if ((trojanscan_chans[i].watch_clone->clone == target) && (!strcmp(trojanscan_chans[i].channel->content, channel_name)))
1880           break;
1881       }
1882       if(i != trojanscan_activechans) {
1883         int j;
1884         for(j=0;j<TROJANSCAN_CLONE_TOTAL;j++) {
1885           if(&trojanscan_swarm[j] == trojanscan_chans[i].watch_clone) {
1886             trojanscan_chans[i].watch_clone = NULL;
1887             break;
1888           }
1889         }
1890       } else {
1891       /*
1892         trojanscan_mainchanmsg("k: %s on %s by %s", target->nick, ((channel *)args[1])->index->name->content, (((nick *)args[0])->nick)?(((nick *)args[0])->nick):"(server)");
1893       */
1894         rj = (struct trojanscan_rejoinlist *)malloc(sizeof(struct trojanscan_rejoinlist));
1895         if (rj) {
1896           rj->rp = NULL;
1897           for(rp=trojanscan_realchanlist;rp;rp=rp->next)
1898                if ((rp->clone->clone == target) && (rp->chan == args[1])) {
1899                 rp->kickedout++;
1900                 rj->rp = rp;
1901                 break;
1902               }
1903             if(!rj->rp) {
1904               free(rj);
1905               return;
1906             }
1907
1908             rj->channel = getsstring(((channel *)args[1])->index->name->content, ((channel *)args[1])->index->name->length);
1909             if(!rj->channel) {
1910               trojanscan_mainchanmsg("d: unable to allocate memory for channel: %s upon rejoin", ((channel *)args[1])->index->name->content);
1911               free(rj);
1912               return;
1913             }
1914
1915             rj->clone = rp->clone;
1916             rj->next = trojanscan_schedulerejoins;
1917             trojanscan_schedulerejoins = rj;
1918
1919             rj->schedule = scheduleoneshot(time(NULL)+1, &trojanscan_rejoin_channel, (void *)rj);
1920           }
1921         }
1922         break;
1923     default:
1924       break;
1925   }
1926 }
1927
1928 void trojanscan_rejoin_channel(void *arg) {
1929   struct trojanscan_rejoinlist *rj2, *lrj, *rj = (struct trojanscan_rejoinlist *)arg;
1930
1931   channel *cp = findchannel(rj->channel->content);
1932   freesstring(rj->channel);
1933
1934   if (rj->rp) {
1935     rj->rp->kickedout--;
1936     if (!cp) {
1937       rj->rp->donotpart = 1; /* we were the last user on the channel, so we need to be VERY careful freeing it */
1938     } else {
1939       if(!rj->rp->donotpart && !rj->rp->kickedout) { /* check we're allowed to join channels (not killed), and we're the last one to join */
1940         if (trojanscan_nickbanned(rj->clone, cp)) {
1941           rj->rp->donotpart = 1;
1942         } else {
1943           localjoinchannel(rj->clone->clone, cp);
1944         }
1945       }
1946     }
1947   }
1948
1949   rj2 = trojanscan_schedulerejoins;
1950   lrj = NULL;
1951
1952   if (rj2 == rj) {
1953     trojanscan_schedulerejoins = rj->next;
1954     free(rj);
1955   } else {
1956     for(rj2=trojanscan_schedulerejoins;rj2;lrj=rj2,rj2=rj2->next) {
1957       if (rj2 == rj) {
1958         lrj->next = rj2->next;
1959         free(rj);
1960         break;
1961       }
1962     }
1963   }
1964
1965 }
1966
1967 void trojanscan_reply(nick *target, char *message, ... ) {
1968   char buf[513];
1969   va_list va;
1970
1971   if (!trojanscan_nick)
1972     return;
1973
1974   va_start(va, message);
1975   vsnprintf(buf, sizeof(buf) - 1, message, va);
1976   va_end(va);
1977
1978   sendnoticetouser(trojanscan_nick, target, "%s", buf);
1979 }
1980
1981
1982 void trojanscan_mainchanmsg(char *message, ...) {
1983   char buf[513];
1984   va_list va;
1985   channel *cp;
1986
1987   if (!trojanscan_nick)
1988     return;
1989   if (!(cp = findchannel(TROJANSCAN_CHANNEL)))
1990     return;
1991
1992   va_start(va, message);
1993   vsnprintf(buf, sizeof(buf) - 1, message, va);
1994   va_end(va);
1995
1996   sendmessagetochannel(trojanscan_nick, cp, "%s", buf);
1997 }
1998
1999 void trojanscan_peonchanmsg(char *message, ...) {
2000   char buf[513];
2001   va_list va;
2002   channel *cp;
2003
2004   if (!trojanscan_nick)
2005     return;
2006   if (!(cp = findchannel(TROJANSCAN_PEONCHANNEL)))
2007     return;
2008
2009   va_start(va, message);
2010   vsnprintf(buf, sizeof(buf) - 1, message, va);
2011   va_end(va);
2012
2013   sendmessagetochannel(trojanscan_nick, cp, "%s", buf);
2014 }
2015
2016 int trojanscan_minmaxrand(float min, float max) {
2017   return (int)((max-min+1)*rand()/(RAND_MAX+min))+min;
2018 }
2019
2020 char *trojanscan_iptostr(char *buf, int buflen, unsigned int ip) {
2021   snprintf(buf, buflen, "%d.%d.%d.%d", ip >> 24, (ip >> 16) & 255, (ip >> 8) & 255, ip & 255);
2022   return buf;
2023 }
2024
2025 char trojanscan_genchar(int ty) {
2026   /* hostname and realname characters*/
2027   if (!ty) {
2028     if (!(trojanscan_minmaxrand(0, 40) % 10)) {
2029       return trojanscan_minmaxrand(48, 57);
2030     } else {
2031       return trojanscan_minmaxrand(97, 122);
2032     }
2033   /* ident characters - without numbers*/
2034   } else if (ty == 1) {
2035     return trojanscan_minmaxrand(97, 122);
2036   /* ident characters - with numbers*/
2037   } else if (ty == 2) {
2038     ty = trojanscan_minmaxrand(97, 125);
2039     if (ty > 122) return trojanscan_minmaxrand(48, 57);
2040     return ty;
2041   /* nick characters - with and without numbers*/
2042   } else if (ty == 3 || ty == 4) {
2043     if (!(trojanscan_minmaxrand(0, 59) % 16)) {
2044       char weirdos[6] = { '\\', '|', '[', '{', ']', '}' };
2045       return weirdos[trojanscan_minmaxrand(0, 5)];
2046     }
2047     if (ty == 4) {
2048       ty = trojanscan_minmaxrand(65, 93);
2049       if (ty > 90) return trojanscan_minmaxrand(48, 57);
2050     } else {
2051       ty = trojanscan_minmaxrand(65, 90);
2052     }
2053     if (!(trojanscan_minmaxrand(0, 40) % 8)) return ty;
2054     return ty + 32;
2055   /* moron check */
2056   } else {
2057     return ' ';
2058   }
2059 }
2060
2061 void trojanscan_gennick(char *ptc, char size) {
2062   int i;
2063   for (i=0;i<size;i++) {
2064     if (i == 0) {
2065       ptc[i] = trojanscan_genchar(3);
2066     } else {
2067       ptc[i] = trojanscan_genchar(4);
2068     }
2069   }
2070   ptc[i] = '\0';
2071 }
2072
2073 void trojanscan_genident(char *ptc, char size) {
2074   int i;
2075   for (i=0;i<size;i++) {
2076     if (i == 0) {
2077       ptc[i] = trojanscan_genchar(1);
2078     } else {
2079       ptc[i] = trojanscan_genchar(2);
2080     }
2081   }
2082   ptc[i] = '\0';
2083 }
2084
2085 void trojanscan_genhost(char *ptc, char size, long *fakeip) {
2086   int dots = trojanscan_minmaxrand(2, 5), i, dotexist = 0, cur;
2087
2088   while (!dotexist) {
2089     for (i=0;i<size;i++) {
2090       ptc[i] = trojanscan_genchar(0);
2091       if ((i > 5) && (i < (size-4))) {
2092         if ((ptc[i-1] != '.') && (ptc[i-1] != '-')) {
2093           cur = trojanscan_minmaxrand(1,size / dots);
2094           if (cur < 3) {
2095             if (cur == 1) {
2096               ptc[i] = '.';
2097               dotexist = 1;
2098             } else {
2099               ptc[i] = '-';
2100             }
2101           }
2102         }
2103       }
2104     }
2105   }
2106   ptc[i] = '\0';
2107
2108   *fakeip = (trojanscan_minmaxrand(0, 65535) << 16) | trojanscan_minmaxrand(0, 65535);
2109 }
2110
2111 void trojanscan_genreal(char *ptc, char size) {
2112   int spaces = trojanscan_minmaxrand(2, 4), i;
2113   for (i=0;i<size;i++) {
2114     ptc[i] = trojanscan_genchar(0);
2115     if ((i > 5) && (i < (size-4))) {
2116       if (ptc[i-1] != ' ') {
2117         if (trojanscan_minmaxrand(1,size / spaces) == 1) ptc[i] = ' ';
2118       }
2119     }
2120   }
2121   ptc[i] = '\0';
2122 }
2123
2124 int trojanscan_is_not_octet(char *begin, int length) {
2125   int i;
2126   if(length > 3)
2127     return 0;
2128   for(i=0;i<length;i++) {
2129     if (!((*begin >= '0') && (*begin <= '9')))
2130       return 0;
2131     begin++;
2132   }
2133   return 1;
2134 }
2135
2136 int trojanscan_generatepool(void) {
2137   int i, k = 0, j = 0, loops = 0;
2138   char *p, *pp;
2139   nick *np;
2140
2141   for (i=0;i<NICKHASHSIZE;i++)
2142     for (np=nicktable[i];np;np=np->next)
2143       j++;
2144
2145   if(j < trojanscan_min_hosts)
2146     return 0;
2147
2148   if(TROJANSCAN_HOST_MODE == TROJANSCAN_STEAL_HOST)
2149     return TROJANSCAN_MINPOOLSIZE;
2150
2151   i = 0;
2152   do {
2153     for (j=trojanscan_minmaxrand(0, NICKHASHSIZE-1);j<NICKHASHSIZE;j++) {
2154       if (nicktable[j]) {
2155         for(p=nicktable[j]->host->name->content, pp=p;*p;) {
2156           if (*++p == '.') {
2157             if (!trojanscan_is_not_octet(pp, p-pp)) {
2158               if (i < TROJANSCAN_POOLSIZE) {
2159                 if (i < trojanscan_hostpoolsize)
2160                   freesstring(trojanscan_hostpool[i]);
2161                 trojanscan_hostpool[i] = getsstring(pp, p-pp);
2162                 i++;
2163               } else {
2164                 if (k >= TROJANSCAN_POOLSIZE)
2165                  break;
2166               }
2167             }
2168             pp=++p;
2169           }
2170         }
2171         if (!trojanscan_is_not_octet(pp, p-pp)) {
2172           if (k < TROJANSCAN_POOLSIZE) {
2173             if (k < trojanscan_tailpoolsize)
2174               freesstring(trojanscan_tailpool[k]);
2175             trojanscan_tailpool[k] = getsstring(pp, p-pp);
2176             k++;
2177           } else {
2178             if (i >= TROJANSCAN_POOLSIZE)
2179               break;
2180           }
2181         }
2182       }
2183     }
2184     loops++;
2185   } while ((loops < 5) && ((i < TROJANSCAN_POOLSIZE) || (k < TROJANSCAN_POOLSIZE)));
2186
2187   trojanscan_hostpoolsize = i;
2188   trojanscan_tailpoolsize = k;
2189   return i;
2190 }
2191
2192 nick *trojanscan_selectuser(void) {
2193   int target = trojanscan_minmaxrand(0, 500), loops = 150, j;
2194   nick *np;
2195   do {
2196     for (j=trojanscan_minmaxrand(0, NICKHASHSIZE-1);j<NICKHASHSIZE;j++)
2197       for(np=nicktable[j];np;np=np->next)
2198         if (!--target)
2199           return np;
2200   } while(--loops > 0);
2201   return NULL;
2202 }
2203
2204 host *trojanscan_selecthost(void) {
2205   int target = trojanscan_minmaxrand(0, 500), loops = 150, j;
2206   host *hp;
2207   do {
2208     for (j=trojanscan_minmaxrand(0, HOSTHASHSIZE-1);j<HOSTHASHSIZE;j++)
2209       for(hp=hosttable[j];hp;hp=hp->next)
2210         if (!--target)
2211           return hp;
2212   } while(--loops > 0);
2213
2214   return NULL;
2215 }
2216
2217 void trojanscan_generatehost(char *buf, int maxsize, long *fakeip) {
2218   if(TROJANSCAN_HOST_MODE == TROJANSCAN_STEAL_HOST) {
2219     host *hp;
2220     int loops = 20;
2221
2222     buf[0] = '\0';
2223
2224     do {
2225       hp = trojanscan_selecthost();
2226       if(hp && (hp->clonecount <= TROJANSCAN_MAX_CLONE_COUNT) && !trojanscan_isip(hp->name->content)) {
2227         strlcpy(buf, hp->name->content, maxsize + 1);
2228         if(hp->nicks) {
2229           *fakeip = hp->nicks->ipaddress;
2230         } else {
2231           *fakeip = (trojanscan_minmaxrand(0, 65535) << 16) | trojanscan_minmaxrand(0, 65535);
2232         }
2233         break;
2234       }
2235     } while(--loops > 0);
2236   } else {
2237     char *cpos;
2238     int pieces = trojanscan_minmaxrand(2, 4), totallen = 0, a = 0, i;
2239     int *choices = malloc(sizeof(int) * (pieces + 1));
2240     int *lengths = malloc(sizeof(int) * (pieces + 1));
2241
2242     choices[pieces] = trojanscan_minmaxrand(0, trojanscan_tailpoolsize-1);
2243     lengths[pieces] = strlen(trojanscan_tailpool[choices[pieces]]->content) + 1;
2244     totallen += lengths[pieces];
2245
2246     for (i=0;i<pieces;i++) {
2247       choices[i] = trojanscan_minmaxrand(0, trojanscan_hostpoolsize-1);
2248       lengths[i] = strlen(trojanscan_hostpool[choices[i]]->content) + 1;
2249       if (totallen+lengths[i] > maxsize) {
2250         choices[i] = choices[pieces];
2251         lengths[i] = lengths[pieces];
2252         pieces-=(pieces-i);
2253         break;
2254       }
2255       totallen += lengths[i];
2256     }
2257
2258     for (i=0;i<pieces;i++) {
2259       for (cpos=trojanscan_hostpool[choices[i]]->content; *cpos;)
2260         buf[a++] = *cpos++;
2261       buf[a++] = '.';
2262     }
2263
2264     for (cpos=trojanscan_tailpool[choices[i]]->content; *cpos;) {
2265       buf[a++] = *cpos++;
2266     }
2267
2268     buf[a] = '\0';
2269     free(choices);
2270     free(lengths);
2271
2272     *fakeip = (trojanscan_minmaxrand(0, 65535) << 16) | trojanscan_minmaxrand(0, 65535);
2273   }
2274 }
2275
2276 void trojanscan_generatenick(char *buf, int maxsize) {
2277   int bits = trojanscan_minmaxrand(2, 3), loops = 0, wanttocopy, len = 0, i, d = 0, newmaxsize = maxsize - trojanscan_minmaxrand(0, 7);
2278   nick *np;
2279
2280   if(newmaxsize > 2)
2281     maxsize = newmaxsize;
2282
2283   do {
2284     np = trojanscan_selectuser();
2285     if(np) {
2286       wanttocopy = trojanscan_minmaxrand(1, (strlen(np->nick) / 2) + 3);
2287       for(i=0;((i<wanttocopy) && (len<maxsize));i++)
2288         buf[len++] = np->nick[i];
2289       if(++d > bits) {
2290         buf[len] = '\0';
2291         return;
2292       }
2293     }
2294   } while (++loops < 10);
2295   buf[0] = '\0';
2296 }
2297
2298 void trojanscan_generateident(char *buf, int maxsize) {
2299   nick *np = trojanscan_selectuser();
2300   buf[0] = '\0';
2301   if(np)
2302     strlcpy(buf, np->ident, maxsize + 1);
2303 }
2304
2305 void trojanscan_generaterealname(char *buf, int maxsize) {
2306   nick *np = trojanscan_selectuser();
2307   buf[0] = '\0';
2308   if(np)
2309     strlcpy(buf, np->realname->name->content, maxsize + 1);
2310 }
2311
2312 void trojanscan_database_close(void) {
2313   mysql_close(&trojanscan_sql);
2314 }
2315
2316 int trojanscan_database_connect(char *dbhost, char *dbuser, char *dbpass, char *db, unsigned int port) {
2317   mysql_init(&trojanscan_sql);
2318   if (!mysql_real_connect(&trojanscan_sql, dbhost, dbuser, dbpass, db, port, NULL, 0))
2319     return -1;
2320   return 0;
2321 }
2322
2323 void trojanscan_database_escape_string(char *dest, char *source, size_t length) {
2324   mysql_escape_string(dest, source, length);
2325 }
2326
2327 int trojanscan_database_query(char *format, ...) {
2328   char trojanscan_sqlquery[TROJANSCAN_QUERY_BUF_SIZE];
2329   va_list va;
2330
2331   va_start(va, format);
2332   vsnprintf(trojanscan_sqlquery, sizeof(trojanscan_sqlquery) - 1, format, va);
2333   va_end(va);
2334   return mysql_query(&trojanscan_sql, trojanscan_sqlquery);
2335 }
2336
2337 int trojanscan_database_num_rows(trojanscan_database_res *res) {
2338   return mysql_num_rows(res);
2339 }
2340
2341 trojanscan_database_res *trojanscan_database_store_result() {
2342   return mysql_store_result(&trojanscan_sql);
2343 }
2344
2345 trojanscan_database_row trojanscan_database_fetch_row(trojanscan_database_res *res) {
2346   return mysql_fetch_row(res);
2347 }
2348
2349 void trojanscan_database_free_result(trojanscan_database_res *res) {
2350   mysql_free_result(res);
2351 }
2352
2353 int trojanscan_isip(char *host) {
2354   char *p = host, components = 0, length = 0;
2355
2356   for(;*p;p++) {
2357     if(*p == '.') {
2358       if(((!length) || (length = 0)) || (++components > 3))
2359         return 0;
2360     } else {
2361       if ((++length > 3) || !isdigit(*p))
2362         return 0;
2363     }
2364   }
2365   return components == 3;
2366 }
2367