2 * InspIRCd -- Internet Relay Chat Daemon
4 * Copyright (C) 2009 Daniel De Graaf <danieldg@inspircd.org>
5 * Copyright (C) 2008 Craig Edwards <craigedwards@brainbox.cc>
6 * Copyright (C) 2007 Robin Burchell <robin+git@viroteck.net>
8 * This file is part of InspIRCd. InspIRCd is free software: you can
9 * redistribute it and/or modify it under the terms of the GNU General Public
10 * License as published by the Free Software Foundation, version 2.
12 * This program is distributed in the hope that it will be useful, but WITHOUT
13 * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS
14 * FOR A PARTICULAR PURPOSE. See the GNU General Public License for more
17 * You should have received a copy of the GNU General Public License
18 * along with this program. If not, see <http://www.gnu.org/licenses/>.
24 /** Handles user mode +k
26 class ServProtectMode : public ModeHandler
29 ServProtectMode(Module* Creator) : ModeHandler(Creator, "servprotect", 'k', PARAM_NONE, MODETYPE_USER) { oper = true; }
31 ModeAction OnModeChange(User* source, User* dest, Channel* channel, std::string ¶meter, bool adding)
33 /* Because this returns MODEACTION_DENY all the time, there is only ONE
34 * way to add this mode and that is at client introduction in the UID command,
35 * as this calls OnModeChange for each mode but disregards the return values.
36 * The mode cannot be manually added or removed, not even by a server or by a remote
37 * user or uline, which prevents its (ab)use as a kiddie 'god mode' on such networks.
38 * I'm sure if someone really wants to do that they can make a copy of this module
39 * that does the job. It won't be me though!
41 return MODEACTION_DENY;
45 class ModuleServProtectMode : public Module
49 ModuleServProtectMode()
54 Version GetVersion() CXX11_OVERRIDE
56 return Version("Provides usermode +k to protect services from kicks, kills, and mode changes.", VF_VENDOR);
59 void OnWhois(User* user, User* dest) CXX11_OVERRIDE
61 if (dest->IsModeSet(bm))
63 ServerInstance->SendWhoisLine(user, dest, 310, dest->nick+" :is a Network Service on "+ServerInstance->Config->Network);
67 ModResult OnRawMode(User* user, Channel* chan, ModeHandler* mh, const std::string& param, bool adding) CXX11_OVERRIDE
69 /* Check that the mode is not a server mode, it is being removed, the user making the change is local, there is a parameter,
70 * and the user making the change is not a uline
72 if (!adding && chan && IS_LOCAL(user) && !param.empty())
74 /* Check if the parameter is a valid nick/uuid
76 User *u = ServerInstance->FindNick(param);
79 Membership* memb = chan->GetUser(u);
80 /* The target user has +k set on themselves, and you are trying to remove a privilege mode the user has set on themselves.
81 * This includes any prefix permission mode, even those registered in other modules, e.g. +qaohv. Using ::ModeString()
82 * here means that the number of modes is restricted to only modes the user has, limiting it to as short a loop as possible.
84 if (u->IsModeSet(bm) && memb && memb->hasMode(mh->GetModeChar()))
87 user->WriteNumeric(ERR_CHANOPRIVSNEEDED, "%s :You are not permitted to remove privileges from %s services", chan->name.c_str(), ServerInstance->Config->Network.c_str());
93 return MOD_RES_PASSTHRU;
96 ModResult OnKill(User* src, User* dst, const std::string &reason) CXX11_OVERRIDE
99 return MOD_RES_PASSTHRU;
101 if (dst->IsModeSet(bm))
103 src->WriteNumeric(485, ":You are not permitted to kill %s services!", ServerInstance->Config->Network.c_str());
104 ServerInstance->SNO->WriteGlobalSno('a', src->nick+" tried to kill service "+dst->nick+" ("+reason+")");
107 return MOD_RES_PASSTHRU;
110 ModResult OnUserPreKick(User *src, Membership* memb, const std::string &reason) CXX11_OVERRIDE
112 if (memb->user->IsModeSet(bm))
114 src->WriteNumeric(ERR_RESTRICTED, "%s :You are not permitted to kick services",
115 memb->chan->name.c_str());
119 return MOD_RES_PASSTHRU;
122 ModResult OnWhoisLine(User* src, User* dst, int &numeric, std::string &text) CXX11_OVERRIDE
124 return ((src != dst) && (numeric == 319) && dst->IsModeSet(bm)) ? MOD_RES_DENY : MOD_RES_PASSTHRU;
128 MODULE_INIT(ModuleServProtectMode)