egghelp/eggheads community

excess flood ban tcl

2007-08-25T06:04:21-04:00

thanks for the help Sir_Fz and awyeah

Statistics: Posted by Sydneybabe — Sat Aug 25, 2007 6:04 am

excess flood ban tcl

2007-08-22T22:33:33-04:00

Nice one..

Statistics: Posted by Aut0Cr0ss — Wed Aug 22, 2007 10:33 pm

excess flood ban tcl

2007-08-22T15:56:13-04:00

Yes I know that, but for the fact that, a *!*@host.domain.com cannot contain special tcl characters to choke on, even if you use vhosts (hosts can only be aplhanumeric) if you look into the case.

Yes, but $uhost (user@host) and $chan can certainly contain special tcl characters so anyone can easily exploit that code. However it doesn't matter if these characters exist or not, it's always good practice to apply these rules in scripting.

See: Script security

Statistics: Posted by Sir_Fz — Wed Aug 22, 2007 3:56 pm

excess flood ban tcl

2007-08-21T06:15:43-04:00

Yes I know that, but for the fact that, a *!*@host.domain.com cannot contain special tcl characters to choke on, even if you use vhosts (hosts can only be aplhanumeric) if you look into the case.

Statistics: Posted by awyeah — Tue Aug 21, 2007 6:15 am

excess flood ban tcl

2007-08-20T10:02:27-04:00

Your timer creates a vulnerability in the script which is easily exploitable, pass a list to timer instead of a string.

Code:

timer 60 [list pushmode $chan -b *!*@[lindex [split $uhost @] 1]]

Statistics: Posted by Sir_Fz — Mon Aug 20, 2007 10:02 am

excess flood ban tcl

2007-08-20T06:23:22-04:00

Here you go:

Code:

#Set the channels here for this script to work onset quitmsgchans "#urdu #awyeah #miri"bind sign - "*" quitmsg:banproc quitmsg:ban {nick uhost hand chan reason} {  if {![botisop $chan]} { return 0 }  if {[string equal "Excess Flood" $reason] || [string equal "SendQ exceeded" $reason]} {   if {[lsearch -exact [split [string tolower $::quitmsgchans]] [string tolower $chan]] != -1} {    if {![wasop $nick $chan] && ![matchattr $hand mnof|mnof $chan]} {      pushmode $chan +b "*!*@[lindex [split $uhost @] 1]"      pushmode $chan -k "\00312Server.\0032flood.off.\00312quit.\0032message\0036"      timer 60 "pushmode $chan -b *!*@[lindex [split $uhost @] 1]"      }    }  }}

Statistics: Posted by awyeah — Mon Aug 20, 2007 6:23 am

excess flood ban tcl

2007-08-20T04:29:22-04:00

thanks Sir_Fz for the help. can i requet also a script ban the user w/ this:

* ASIA (~klg@121.250.95) Quit (Excess Flood)
* bot sets mode: -k+b Excess.Flood *!*@121.250.95

thanks in advance for the help.

Statistics: Posted by Sydneybabe — Mon Aug 20, 2007 4:29 am

excess flood ban tcl

2007-07-09T05:30:55-04:00

Code:

bind sign - * excess:floodproc excess:flood {nick uhost hand chan arg} { if {[string equal "Excess Flood" $arg]} {  pushmode $chan +b *!*@[lindex [split $uhost @] 1]" }}

Statistics: Posted by Sir_Fz — Mon Jul 09, 2007 5:30 am

excess flood ban tcl

2007-07-08T22:50:07-04:00

hi and good days. i'm requesting a script that will ban the user disconnected with a reason of "Quit (Excess Flood)" .. thanks in advance.

Statistics: Posted by Sydneybabe — Sun Jul 08, 2007 10:50 pm