1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
|
/*
* Copyright (c) 2007 Atheme Development Group
* Copyright (c) 2017 ChatLounge IRC Network Development
*
* Rights to this code are as documented in doc/LICENSE.
*
* This file contains code for the NickServ SETPASS function.
*
*/
#include "atheme.h"
DECLARE_MODULE_V1
(
"nickserv/setpass", false, _modinit, _moddeinit,
PACKAGE_STRING,
VENDOR_STRING
);
void (*add_history_entry_setting)(myuser_t *smu, myuser_t *tmu, const char *settingname, const char *setting) = NULL;
static void clear_setpass_key(user_t *u);
static void ns_cmd_setpass(sourceinfo_t *si, int parc, char *parv[]);
static void show_setpass(hook_user_req_t *hdata);
command_t ns_setpass = { "SETPASS", N_("Changes a password using an authcode."), AC_NONE, 3, ns_cmd_setpass, { .path = "nickserv/setpass" } };
void _modinit(module_t *m)
{
if (module_request("nickserv/main"))
add_history_entry_setting = module_locate_symbol("nickserv/main", "add_history_entry_setting");
hook_add_event("user_identify");
hook_add_user_identify(clear_setpass_key);
hook_add_event("user_info");
hook_add_user_info(show_setpass);
service_named_bind_command("nickserv", &ns_setpass);
}
void _moddeinit(module_unload_intent_t intent)
{
hook_del_user_identify(clear_setpass_key);
hook_del_user_info(show_setpass);
service_named_unbind_command("nickserv", &ns_setpass);
}
static void ns_cmd_setpass(sourceinfo_t *si, int parc, char *parv[])
{
myuser_t *mu;
metadata_t *md;
char *nick = parv[0];
char *key = parv[1];
char *password = parv[2];
if (!nick || !key || !password)
{
command_fail(si, fault_needmoreparams, STR_INSUFFICIENT_PARAMS, "SETPASS");
command_fail(si, fault_needmoreparams, _("Syntax: SETPASS <account> <key> <newpass>"));
return;
}
if (strchr(password, ' '))
{
command_fail(si, fault_badparams, STR_INVALID_PARAMS, "SETPASS");
command_fail(si, fault_badparams, _("Syntax: SETPASS <account> <key> <newpass>"));
return;
}
if (!(mu = myuser_find(nick)))
{
command_fail(si, fault_nosuch_target, _("\2%s\2 is not registered."), nick);
return;
}
if (si->smu == mu)
{
command_fail(si, fault_already_authed, _("You are logged in and can change your password using the SET PASSWORD command. The password has not been changed."));
return;
}
if (strlen(password) >= PASSLEN)
{
command_fail(si, fault_badparams, STR_INVALID_PARAMS, "SETPASS");
command_fail(si, fault_badparams, _("Registration passwords may not be longer than \2%d\2 characters."), PASSLEN - 1);
return;
}
if (!strcasecmp(password, entity(mu)->name))
{
command_fail(si, fault_badparams, _("You cannot use your nickname as a password."));
command_fail(si, fault_badparams, _("Syntax: SETPASS <account> <key> <newpass>"));
return;
}
md = metadata_find(mu, "private:setpass:key");
if (md == NULL || crypt_verify_password(key, md->value) == NULL)
{
if (md != NULL)
logcommand(si, CMDLOG_SET, "failed SETPASS (invalid key)");
command_fail(si, fault_badparams, _("Verification failed. Invalid key for \2%s\2."), entity(mu)->name);
return;
}
logcommand(si, CMDLOG_SET, "SETPASS: \2%s\2", entity(mu)->name);
metadata_delete(mu, "private:setpass:key");
metadata_delete(mu, "private:sendpass:sender");
metadata_delete(mu, "private:sendpass:timestamp");
set_password(mu, password);
command_success_nodata(si, _("The password for \2%s\2 has been changed to \2%s\2."), entity(mu)->name, password);
if (mu->flags & MU_NOPASSWORD)
{
mu->flags &= ~MU_NOPASSWORD;
command_success_nodata(si, _("The \2%s\2 flag has been removed for the account: \2%s\2"), "NOPASSWORD", entity(mu)->name);
add_history_entry_setting(si->smu, mu, "NOPASSWORD", "OFF");
}
add_history_entry_setting(si->smu, mu, "PASSWORD", "<Changed>");
}
static void clear_setpass_key(user_t *u)
{
myuser_t *mu = u->myuser;
if (!metadata_find(mu, "private:setpass:key"))
return;
metadata_delete(mu, "private:setpass:key");
metadata_delete(mu, "private:sendpass:sender");
metadata_delete(mu, "private:sendpass:timestamp");
notice(nicksvs.nick, u->nick, "Warning: SENDPASS had been used to mail you a password recovery "
"key. Since you have identified, that key is no longer valid.");
}
static void show_setpass(hook_user_req_t *hdata)
{
if (has_priv(hdata->si, PRIV_USER_AUSPEX))
{
if (metadata_find(hdata->mu, "private:setpass:key"))
command_success_nodata(hdata->si, "%s has an active password reset key", entity(hdata->mu)->name);
metadata_t *md;
char strfbuf[BUFSIZE];
if ((md = metadata_find(hdata->mu, "private:sendpass:sender")) != NULL)
{
const char *sender = md->value;
time_t ts;
struct tm tm;
md = metadata_find(hdata->mu, "private:sendpass:timestamp");
ts = md != NULL ? atoi(md->value) : 0;
tm = *localtime(&ts);
strftime(strfbuf, sizeof strfbuf, TIME_FORMAT, &tm);
command_success_nodata(hdata->si, _("%s was \2SENDPASSED\2 by %s on %s"), entity(hdata->mu)->name, sender, strfbuf);
}
}
}
|
