Sanity checks in SAJOIN and SAPART

git-svn-id: http://svn.inspircd.org/repository/trunk/inspircd@441 e03df62e-2008-0410-955e-edbf42e46eb7

1 files changed, 10 insertions, 0 deletions

diff --git a/src/modules/m_sajoin.cpp b/src/modules/m_sajoin.cpp
index 94175a523..e687e474d 100644
--- a/src/modules/m_sajoin.cpp
+++ b/src/modules/m_sajoin.cpp
@@ -15,6 +15,16 @@ void handle_sajoin(char **parameters, int pcnt, userrec *user)
 	userrec* dest = Srv->FindNick(std::string(parameters[0]));
 	if (dest)
 	{
+
+		for (int x = 0; x < strlen(parameters[0]); x++)
+		{
+				if ((parameters[0][0] != '#') || (parameters[0][x] == ' ') || (parameters[0][x]> ','))
+				{
+					Srv->SendTo(NULL,user,"NOTICE "+std::string(user->nick)+" :*** Invalid characters in channel name");
+					return;
+				}
+		}
+
 		Srv->SendOpers(std::string(user->nick)+" used SAJOIN to make "+std::string(dest->nick)+" join "+parameters[1]);
 		Srv->JoinUserToChannel(dest,std::string(parameters[1]),std::string(dest->nick));
 	}