summaryrefslogtreecommitdiff
path: root/src/modules
diff options
context:
space:
mode:
authorbrain <brain@e03df62e-2008-0410-955e-edbf42e46eb7>2005-04-25 17:06:24 +0000
committerbrain <brain@e03df62e-2008-0410-955e-edbf42e46eb7>2005-04-25 17:06:24 +0000
commit5bc207b17b13805b16081ef79568992d5d0c76c0 (patch)
treee26d6ba2d77ae4e0df0b46ef63276359f464cecd /src/modules
parent9f4210a4ab79bb0edd6b29011b7bb583c365bcdd (diff)
Added m_sqloper, allows storage of opers within a mysql database
git-svn-id: http://svn.inspircd.org/repository/trunk/inspircd@1187 e03df62e-2008-0410-955e-edbf42e46eb7
Diffstat (limited to 'src/modules')
-rw-r--r--src/modules/extra/m_sqloper.cpp225
1 files changed, 225 insertions, 0 deletions
diff --git a/src/modules/extra/m_sqloper.cpp b/src/modules/extra/m_sqloper.cpp
new file mode 100644
index 000000000..fde524567
--- /dev/null
+++ b/src/modules/extra/m_sqloper.cpp
@@ -0,0 +1,225 @@
+/* +------------------------------------+
+ * | Inspire Internet Relay Chat Daemon |
+ * +------------------------------------+
+ *
+ * Inspire is copyright (C) 2002-2004 ChatSpike-Dev.
+ * E-mail:
+ * <brain@chatspike.net>
+ * <Craig@chatspike.net>
+ *
+ * Written by Craig Edwards, Craig McLure, and others.
+ * This program is free but copyrighted software; see
+ * the file COPYING for details.
+ *
+ * ---------------------------------------------------
+ */
+
+#include <stdio.h>
+#include <string>
+#include <stdlib.h>
+#include <time.h>
+#include <sys/types.h>
+#include <sys/socket.h>
+#include <sys/time.h>
+#include <string.h>
+#include <unistd.h>
+#include <errno.h>
+#include <fcntl.h>
+#include <poll.h>
+#include "users.h"
+#include "channels.h"
+#include "modules.h"
+#include "inspircd.h"
+#include "m_sql.h"
+
+/* $ModDesc: Allows storage of oper credentials in an SQL table */
+
+Server *Srv;
+
+class ModuleSQLOper : public Module
+{
+ ConfigReader* Conf;
+ unsigned long dbid;
+ Module* SQLModule;
+
+ public:
+ bool ReadConfig()
+ {
+ dbid = Conf->ReadInteger("sqloper","dbid",0,true); // database id of a database configured in m_sql (see m_sql config)
+ SQLModule = Srv->FindModule("m_sql.so");
+ if (!SQLModule)
+ Srv->Log(DEFAULT,"WARNING: m_sqloper.so could not initialize because m_sql.so is not loaded. Load the module and rehash your server.");
+ return (SQLModule);
+ }
+
+ ModuleSQLOper()
+ {
+ Srv = new Server;
+ Conf = new ConfigReader();
+ ReadConfig();
+ }
+
+ virtual void OnRehash()
+ {
+ delete Conf;
+ Conf = new ConfigReader();
+ ReadConfig();
+ }
+
+ virtual int OnPreCommand(std::string command, char **parameters, int pcnt, userrec *user)
+ {
+ if (command == "OPER")
+ {
+ if (LookupOper(parameters[0],parameters[1],user))
+ return 1;
+ }
+ return 0;
+ }
+
+ bool LookupOper(std::string username, std::string password, userrec* user)
+ {
+ bool found = false;
+
+ // is the sql module loaded? If not, we don't attempt to do anything.
+ if (!SQLModule)
+ return false;
+
+ // sanitize the password (we dont want any mysql insertion exploits!)
+ std::string temp = "";
+ for (int q = 0; q < password.length(); q++)
+ {
+ if (password[q] == '\'')
+ {
+ temp = temp + "\'";
+ }
+ else if (password[q] == '"')
+ {
+ temp = temp + "\\\"";
+ }
+ else temp = temp + password[q];
+ }
+ password = temp;
+ temp = "";
+ for (int v = 0; v < username.length(); v++)
+ {
+ if (username[v] == '\'')
+ {
+ temp = temp + "\'";
+ }
+ if (username[v] == '"')
+ {
+ temp = temp + "\\\"";
+ }
+ else temp = temp + username[v];
+ }
+ username = temp;
+
+ // Create a request containing the SQL query and send it to m_sql.so
+ SQLRequest* query = new SQLRequest(SQL_RESULT,dbid,"SELECT username,password,type FROM ircd_opers WHERE username='"+username+"' AND password=md5('"+password+"')");
+ Request queryrequest((char*)query, this, SQLModule);
+ SQLResult* result = (SQLResult*)queryrequest.Send();
+
+ // Did we get "OK" as a result?
+ if (result->GetType() == SQL_OK)
+ {
+ Srv->Log(DEBUG,"An SQL based oper exists");
+ // if we did, this means we may now request a row... there should be only one row for each user, so,
+ // we don't need to loop to fetch multiple rows.
+ SQLRequest* rowrequest = new SQLRequest(SQL_ROW,dbid,"");
+ Request rowquery((char*)rowrequest, this, SQLModule);
+ SQLResult* rowresult = (SQLResult*)rowquery.Send();
+
+ // did we get a row? If we did, we can now do something with the fields
+ if (rowresult->GetType() == SQL_ROW)
+ {
+ if (rowresult->GetField("username") == username)
+ {
+ found = true;
+ // oper up the user.
+ for (int j =0; j < Conf->Enumerate("type"); j++)
+ {
+ std::string TypeName = Conf->ReadValue("type","name",j);
+ if (TypeName == rowresult->GetField("type"))
+ {
+ /* found this oper's opertype */
+ Srv->MeshSendAll("| "+std::string(user->nick)+" "+TypeName);
+ std::string HostName = Conf->ReadValue("type","host",j);
+ Srv->ChangeHost(user,HostName);
+ strlcpy(user->oper,TypeName.c_str(),NICKMAX);
+ WriteOpers("*** %s (%s@%s) is now an IRC operator of type %s",user->nick,user->ident,user->host,rowresult->GetField("type").c_str());
+ WriteServ(user->fd,"381 %s :You are now an IRC operator of type %s",user->nick,rowresult->GetField("type").c_str());
+ if (!strchr(user->modes,'o'))
+ {
+ strcat(user->modes,"o");
+ WriteServ(user->fd,"MODE %s :+o",user->nick);
+ Srv->MeshSendAll("M "+std::string(user->nick)+" +o");
+ Module* Logger = Srv->FindModule("m_sqllog.so");
+ if (Logger)
+ Logger->OnOper(user);
+ log(DEFAULT,"OPER: %s!%s@%s opered as type: %s",user->nick,user->ident,user->host,rowresult->GetField("type").c_str());
+ }
+ break;
+ }
+ }
+
+ }
+ delete rowresult;
+ }
+ else
+ {
+ // we didn't have a row.
+ found = false;
+ }
+ delete rowrequest;
+ delete result;
+ }
+ else
+ {
+ // the query was bad
+ found = false;
+ }
+ query->SetQueryType(SQL_DONE);
+ query->SetConnID(dbid);
+ Request donerequest((char*)query, this, SQLModule);
+ donerequest.Send();
+ delete query;
+ return found;
+ }
+
+ virtual ~ModuleSQLOper()
+ {
+ delete Conf;
+ delete Srv;
+ }
+
+ virtual Version GetVersion()
+ {
+ return Version(1,0,0,1,VF_VENDOR);
+ }
+
+};
+
+class ModuleSQLOperFactory : public ModuleFactory
+{
+ public:
+ ModuleSQLOperFactory()
+ {
+ }
+
+ ~ModuleSQLOperFactory()
+ {
+ }
+
+ virtual Module * CreateModule()
+ {
+ return new ModuleSQLOper;
+ }
+
+};
+
+
+extern "C" void * init_module( void )
+{
+ return new ModuleSQLOperFactory;
+}
+