X-Git-Url: https://jfr.im/git/solanum.git/blobdiff_plain/06c3a3191c53124ca533b5f4c9b44f3613e6858b..a52d84f7233346cbd24456a5b875785eb5369c53:/extensions/m_webirc.c

diff --git a/extensions/m_webirc.c b/extensions/m_webirc.c
index ea6bc362..04f59c96 100644
--- a/extensions/m_webirc.c
+++ b/extensions/m_webirc.c
@@ -20,8 +20,6 @@
  *  along with this program; if not, write to the Free Software
  *  Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA  02111-1307
  *  USA
- *
- *  $Id: m_webirc.c 3458 2007-05-18 19:51:22Z jilles $
  */
 /* Usage:
  * auth {
@@ -55,52 +53,63 @@
 #include "s_conf.h"
 #include "reject.h"
 
-static int mr_webirc(struct Client *, struct Client *, int, const char **);
+static const char webirc_desc[] = "Adds support for the WebIRC system";
+
+static void mr_webirc(struct MsgBuf *msgbuf_p, struct Client *, struct Client *, int, const char **);
 
 struct Message webirc_msgtab = {
-	"WEBIRC", 0, 0, 0, MFLG_SLOW | MFLG_UNREG,
+	"WEBIRC", 0, 0, 0, 0,
 	{{mr_webirc, 5}, mg_reg, mg_ignore, mg_ignore, mg_ignore, mg_reg}
 };
 
 mapi_clist_av1 webirc_clist[] = { &webirc_msgtab, NULL };
-DECLARE_MODULE_AV1(webirc, NULL, NULL, webirc_clist, NULL, NULL, "$Revision: 20702 $");
+
+static void new_local_user(void *data);
+mapi_hfn_list_av1 webirc_hfnlist[] = {
+	{ "new_local_user", (hookfn) new_local_user },
+	{ NULL, NULL }
+};
+
+DECLARE_MODULE_AV2(webirc, NULL, NULL, webirc_clist, NULL, webirc_hfnlist, NULL, NULL, webirc_desc);
 
 /*
  * mr_webirc - webirc message handler
  *      parv[1] = password
  *      parv[2] = fake username (we ignore this)
- *	parv[3] = fake hostname 
+ *	parv[3] = fake hostname
  *	parv[4] = fake ip
  */
-static int
-mr_webirc(struct Client *client_p, struct Client *source_p, int parc, const char *parv[])
+static void
+mr_webirc(struct MsgBuf *msgbuf_p, struct Client *client_p, struct Client *source_p, int parc, const char *parv[])
 {
 	struct ConfItem *aconf;
 	const char *encr;
+	struct rb_sockaddr_storage addr;
 
-	if (!strchr(parv[4], '.') && !strchr(parv[4], ':'))
-	{
-		sendto_one(source_p, "NOTICE * :Invalid IP");
-		return 0;
-	}
+	int secure = 0;
 
-	aconf = find_address_conf(client_p->host, client_p->sockhost, 
+	aconf = find_address_conf(client_p->host, client_p->sockhost,
 				IsGotId(client_p) ? client_p->username : "webirc",
 				IsGotId(client_p) ? client_p->username : "webirc",
 				(struct sockaddr *) &client_p->localClient->ip,
-				client_p->localClient->ip.ss_family, NULL);
+				GET_SS_FAMILY(&client_p->localClient->ip), NULL);
 	if (aconf == NULL || !(aconf->status & CONF_CLIENT))
-		return 0;
+		return;
 	if (!IsConfDoSpoofIp(aconf) || irccmp(aconf->info.name, "webirc."))
 	{
 		/* XXX */
 		sendto_one(source_p, "NOTICE * :Not a CGI:IRC auth block");
-		return 0;
+		return;
 	}
 	if (EmptyString(aconf->passwd))
 	{
 		sendto_one(source_p, "NOTICE * :CGI:IRC auth blocks must have a password");
-		return 0;
+		return;
+	}
+	if (!IsSSL(source_p) && aconf->flags & CONF_FLAGS_NEED_SSL)
+	{
+		sendto_one(source_p, "NOTICE * :Your CGI:IRC block requires TLS");
+		return;
 	}
 
 	if (EmptyString(parv[1]))
@@ -113,30 +122,65 @@ mr_webirc(struct Client *client_p, struct Client *source_p, int parc, const char
 	if (encr == NULL || strcmp(encr, aconf->passwd))
 	{
 		sendto_one(source_p, "NOTICE * :CGI:IRC password incorrect");
-		return 0;
+		return;
 	}
 
+	if (rb_inet_pton_sock(parv[4], &addr) <= 0)
+	{
+		sendto_one(source_p, "NOTICE * :Invalid IP");
+		return;
+	}
 
-	rb_strlcpy(source_p->sockhost, parv[4], sizeof(source_p->sockhost));
+	source_p->localClient->ip = addr;
+
+	if (parc >= 6)
+	{
+		const char *s;
+		for (s = parv[5]; s != NULL; (s = strchr(s, ' ')) && s++)
+		{
+			if (!ircncmp(s, "secure", 6) && (s[6] == '=' || s[6] == ' ' || s[6] == '\0'))
+				secure = 1;
+		}
+	}
+
+	if (secure && !IsSSL(source_p))
+	{
+		sendto_one(source_p, "NOTICE * :CGI:IRC is not connected securely; marking you as insecure");
+		secure = 0;
+	}
+
+	if (!secure)
+	{
+		SetInsecure(source_p);
+	}
+
+	rb_inet_ntop_sock((struct sockaddr *)&source_p->localClient->ip, source_p->sockhost, sizeof(source_p->sockhost));
 
 	if(strlen(parv[3]) <= HOSTLEN)
 		rb_strlcpy(source_p->host, parv[3], sizeof(source_p->host));
 	else
 		rb_strlcpy(source_p->host, source_p->sockhost, sizeof(source_p->host));
-	
-	rb_inet_pton_sock(parv[4], (struct sockaddr *)&source_p->localClient->ip);
 
 	/* Check dlines now, klines will be checked on registration */
-	if((aconf = find_dline((struct sockaddr *)&source_p->localClient->ip, 
-			       source_p->localClient->ip.ss_family)))
+	if((aconf = find_dline((struct sockaddr *)&source_p->localClient->ip,
+			       GET_SS_FAMILY(&source_p->localClient->ip))))
 	{
 		if(!(aconf->status & CONF_EXEMPTDLINE))
 		{
 			exit_client(client_p, source_p, &me, "D-lined");
-			return 0;
+			return;
 		}
 	}
 
 	sendto_one(source_p, "NOTICE * :CGI:IRC host/IP set to %s %s", parv[3], parv[4]);
-	return 0;
+}
+
+static void
+new_local_user(void *data)
+{
+	struct Client *source_p = data;
+	struct ConfItem *aconf = source_p->localClient->att_conf;
+
+	if (!irccmp(aconf->info.name, "webirc."))
+		exit_client(source_p, source_p, &me, "Cannot log in using a WEBIRC block");
 }