src/users.cpp

   1 /*
   2  * InspIRCd -- Internet Relay Chat Daemon
   3  *
   4  *   Copyright (C) 2009-2010 Daniel De Graaf <danieldg@inspircd.org>
   5  *   Copyright (C) 2006-2009 Robin Burchell <robin+git@viroteck.net>
   6  *   Copyright (C) 2006-2007, 2009 Dennis Friis <peavey@inspircd.org>
   7  *   Copyright (C) 2008 John Brooks <john.brooks@dereferenced.net>
   8  *   Copyright (C) 2008 Thomas Stagner <aquanight@inspircd.org>
   9  *   Copyright (C) 2008 Oliver Lupton <oliverlupton@gmail.com>
  10  *   Copyright (C) 2003-2008 Craig Edwards <craigedwards@brainbox.cc>
  11  *
  12  * This file is part of InspIRCd.  InspIRCd is free software: you can
  13  * redistribute it and/or modify it under the terms of the GNU General Public
  14  * License as published by the Free Software Foundation, version 2.
  15  *
  16  * This program is distributed in the hope that it will be useful, but WITHOUT
  17  * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS
  18  * FOR A PARTICULAR PURPOSE.  See the GNU General Public License for more
  19  * details.
  20  *
  21  * You should have received a copy of the GNU General Public License
  22  * along with this program.  If not, see <http://www.gnu.org/licenses/>.
  23  */
  24
  25
  26 #include "inspircd.h"
  27 #include "xline.h"
  28
  29 already_sent_t LocalUser::already_sent_id = 0;
  30
  31 bool User::IsNoticeMaskSet(unsigned char sm)
  32 {
  33         if (!isalpha(sm))
  34                 return false;
  35         return (snomasks[sm-65]);
  36 }
  37
  38 bool User::IsModeSet(unsigned char m)
  39 {
  40         ModeHandler* mh = ServerInstance->Modes->FindMode(m, MODETYPE_USER);
  41         return (mh && modes[mh->GetId()]);
  42 }
  43
  44 const char* User::FormatModes(bool showparameters)
  45 {
  46         static std::string data;
  47         std::string params;
  48         data.clear();
  49
  50         for (unsigned char n = 0; n < 64; n++)
  51         {
  52                 ModeHandler* mh = ServerInstance->Modes->FindMode(n + 65, MODETYPE_USER);
  53                 if (mh && IsModeSet(mh))
  54                 {
  55                         data.push_back(n + 65);
  56                         if (showparameters && mh->GetNumParams(true))
  57                         {
  58                                 std::string p = mh->GetUserParameter(this);
  59                                 if (p.length())
  60                                         params.append(" ").append(p);
  61                         }
  62                 }
  63         }
  64         data += params;
  65         return data.c_str();
  66 }
  67
  68 User::User(const std::string& uid, Server* srv, int type)
  69         : uuid(uid), server(srv), usertype(type)
  70 {
  71         age = ServerInstance->Time();
  72         signon = 0;
  73         registered = 0;
  74         quitting = false;
  75         client_sa.sa.sa_family = AF_UNSPEC;
  76
  77         ServerInstance->Logs->Log("USERS", LOG_DEBUG, "New UUID for user: %s", uuid.c_str());
  78
  79         if (!ServerInstance->Users->uuidlist.insert(std::make_pair(uuid, this)).second)
  80                 throw CoreException("Duplicate UUID "+std::string(uuid)+" in User constructor");
  81 }
  82
  83 LocalUser::LocalUser(int myfd, irc::sockets::sockaddrs* client, irc::sockets::sockaddrs* servaddr)
  84         : User(ServerInstance->UIDGen.GetUID(), ServerInstance->FakeClient->server, USERTYPE_LOCAL), eh(this),
  85         bytes_in(0), bytes_out(0), cmds_in(0), cmds_out(0), nping(0), CommandFloodPenalty(0),
  86         already_sent(0)
  87 {
  88         exempt = quitting_sendq = false;
  89         idle_lastmsg = 0;
  90         ident = "unknown";
  91         lastping = 0;
  92         eh.SetFd(myfd);
  93         memcpy(&client_sa, client, sizeof(irc::sockets::sockaddrs));
  94         memcpy(&server_sa, servaddr, sizeof(irc::sockets::sockaddrs));
  95         dhost = host = GetIPString();
  96 }
  97
  98 User::~User()
  99 {
 100         if (ServerInstance->FindUUID(uuid))
 101                 ServerInstance->Logs->Log("USERS", LOG_DEFAULT, "User destructor for %s called without cull", uuid.c_str());
 102 }
 103
 104 const std::string& User::MakeHost()
 105 {
 106         if (!this->cached_makehost.empty())
 107                 return this->cached_makehost;
 108
 109         // XXX: Is there really a need to cache this?
 110         this->cached_makehost = ident + "@" + host;
 111         return this->cached_makehost;
 112 }
 113
 114 const std::string& User::MakeHostIP()
 115 {
 116         if (!this->cached_hostip.empty())
 117                 return this->cached_hostip;
 118
 119         // XXX: Is there really a need to cache this?
 120         this->cached_hostip = ident + "@" + this->GetIPString();
 121         return this->cached_hostip;
 122 }
 123
 124 const std::string& User::GetFullHost()
 125 {
 126         if (!this->cached_fullhost.empty())
 127                 return this->cached_fullhost;
 128
 129         // XXX: Is there really a need to cache this?
 130         this->cached_fullhost = nick + "!" + ident + "@" + dhost;
 131         return this->cached_fullhost;
 132 }
 133
 134 const std::string& User::GetFullRealHost()
 135 {
 136         if (!this->cached_fullrealhost.empty())
 137                 return this->cached_fullrealhost;
 138
 139         // XXX: Is there really a need to cache this?
 140         this->cached_fullrealhost = nick + "!" + ident + "@" + host;
 141         return this->cached_fullrealhost;
 142 }
 143
 144 InviteList& LocalUser::GetInviteList()
 145 {
 146         RemoveExpiredInvites();
 147         return invites;
 148 }
 149
 150 bool LocalUser::RemoveInvite(Channel* chan)
 151 {
 152         Invitation* inv = Invitation::Find(chan, this);
 153         if (inv)
 154         {
 155                 delete inv;
 156                 return true;
 157         }
 158         return false;
 159 }
 160
 161 void LocalUser::RemoveExpiredInvites()
 162 {
 163         Invitation::Find(NULL, this);
 164 }
 165
 166 bool User::HasModePermission(unsigned char, ModeType)
 167 {
 168         return true;
 169 }
 170
 171 bool LocalUser::HasModePermission(unsigned char mode, ModeType type)
 172 {
 173         if (!this->IsOper())
 174                 return false;
 175
 176         if (mode < 'A' || mode > ('A' + 64)) return false;
 177
 178         return ((type == MODETYPE_USER ? oper->AllowedUserModes : oper->AllowedChanModes))[(mode - 'A')];
 179
 180 }
 181 /*
 182  * users on remote servers can completely bypass all permissions based checks.
 183  * This prevents desyncs when one server has different type/class tags to another.
 184  * That having been said, this does open things up to the possibility of source changes
 185  * allowing remote kills, etc - but if they have access to the src, they most likely have
 186  * access to the conf - so it's an end to a means either way.
 187  */
 188 bool User::HasPermission(const std::string&)
 189 {
 190         return true;
 191 }
 192
 193 bool LocalUser::HasPermission(const std::string &command)
 194 {
 195         // are they even an oper at all?
 196         if (!this->IsOper())
 197         {
 198                 return false;
 199         }
 200
 201         if (oper->AllowedOperCommands.find(command) != oper->AllowedOperCommands.end())
 202                 return true;
 203         else if (oper->AllowedOperCommands.find("*") != oper->AllowedOperCommands.end())
 204                 return true;
 205
 206         return false;
 207 }
 208
 209 bool User::HasPrivPermission(const std::string &privstr, bool noisy)
 210 {
 211         return true;
 212 }
 213
 214 bool LocalUser::HasPrivPermission(const std::string &privstr, bool noisy)
 215 {
 216         if (!this->IsOper())
 217         {
 218                 if (noisy)
 219                         this->WriteNotice("You are not an oper");
 220                 return false;
 221         }
 222
 223         if (oper->AllowedPrivs.find(privstr) != oper->AllowedPrivs.end())
 224         {
 225                 return true;
 226         }
 227         else if (oper->AllowedPrivs.find("*") != oper->AllowedPrivs.end())
 228         {
 229                 return true;
 230         }
 231
 232         if (noisy)
 233                 this->WriteNotice("Oper type " + oper->name + " does not have access to priv " + privstr);
 234
 235         return false;
 236 }
 237
 238 void UserIOHandler::OnDataReady()
 239 {
 240         if (user->quitting)
 241                 return;
 242
 243         if (recvq.length() > user->MyClass->GetRecvqMax() && !user->HasPrivPermission("users/flood/increased-buffers"))
 244         {
 245                 ServerInstance->Users->QuitUser(user, "RecvQ exceeded");
 246                 ServerInstance->SNO->WriteToSnoMask('a', "User %s RecvQ of %lu exceeds connect class maximum of %lu",
 247                         user->nick.c_str(), (unsigned long)recvq.length(), user->MyClass->GetRecvqMax());
 248                 return;
 249         }
 250         unsigned long sendqmax = ULONG_MAX;
 251         if (!user->HasPrivPermission("users/flood/increased-buffers"))
 252                 sendqmax = user->MyClass->GetSendqSoftMax();
 253         unsigned long penaltymax = ULONG_MAX;
 254         if (!user->HasPrivPermission("users/flood/no-fakelag"))
 255                 penaltymax = user->MyClass->GetPenaltyThreshold() * 1000;
 256
 257         while (user->CommandFloodPenalty < penaltymax && getSendQSize() < sendqmax)
 258         {
 259                 std::string line;
 260                 line.reserve(ServerInstance->Config->Limits.MaxLine);
 261                 std::string::size_type qpos = 0;
 262                 while (qpos < recvq.length())
 263                 {
 264                         char c = recvq[qpos++];
 265                         switch (c)
 266                         {
 267                         case '\0':
 268                                 c = ' ';
 269                                 break;
 270                         case '\r':
 271                                 continue;
 272                         case '\n':
 273                                 goto eol_found;
 274                         }
 275                         if (line.length() < ServerInstance->Config->Limits.MaxLine - 2)
 276                                 line.push_back(c);
 277                 }
 278                 // if we got here, the recvq ran out before we found a newline
 279                 return;
 280 eol_found:
 281                 // just found a newline. Terminate the string, and pull it out of recvq
 282                 recvq = recvq.substr(qpos);
 283
 284                 // TODO should this be moved to when it was inserted in recvq?
 285                 ServerInstance->stats.Recv += qpos;
 286                 user->bytes_in += qpos;
 287                 user->cmds_in++;
 288
 289                 ServerInstance->Parser.ProcessBuffer(line, user);
 290                 if (user->quitting)
 291                         return;
 292         }
 293         if (user->CommandFloodPenalty >= penaltymax && !user->MyClass->fakelag)
 294                 ServerInstance->Users->QuitUser(user, "Excess Flood");
 295 }
 296
 297 void UserIOHandler::AddWriteBuf(const std::string &data)
 298 {
 299         if (user->quitting_sendq)
 300                 return;
 301         if (!user->quitting && getSendQSize() + data.length() > user->MyClass->GetSendqHardMax() &&
 302                 !user->HasPrivPermission("users/flood/increased-buffers"))
 303         {
 304                 user->quitting_sendq = true;
 305                 ServerInstance->GlobalCulls.AddSQItem(user);
 306                 return;
 307         }
 308
 309         // We still want to append data to the sendq of a quitting user,
 310         // e.g. their ERROR message that says 'closing link'
 311
 312         WriteData(data);
 313 }
 314
 315 void UserIOHandler::OnError(BufferedSocketError)
 316 {
 317         ServerInstance->Users->QuitUser(user, getError());
 318 }
 319
 320 CullResult User::cull()
 321 {
 322         if (!quitting)
 323                 ServerInstance->Users->QuitUser(this, "Culled without QuitUser");
 324
 325         if (client_sa.sa.sa_family != AF_UNSPEC)
 326                 ServerInstance->Users->RemoveCloneCounts(this);
 327
 328         return Extensible::cull();
 329 }
 330
 331 CullResult LocalUser::cull()
 332 {
 333         ServerInstance->Users->local_users.erase(this);
 334         ClearInvites();
 335         eh.cull();
 336         return User::cull();
 337 }
 338
 339 CullResult FakeUser::cull()
 340 {
 341         // Fake users don't quit, they just get culled.
 342         quitting = true;
 343         // Fake users are not inserted into UserManager::clientlist, they're only in the uuidlist
 344         ServerInstance->Users->uuidlist.erase(uuid);
 345         return User::cull();
 346 }
 347
 348 void User::Oper(OperInfo* info)
 349 {
 350         ModeHandler* opermh = ServerInstance->Modes->FindMode('o', MODETYPE_USER);
 351         if (this->IsModeSet(opermh))
 352                 this->UnOper();
 353
 354         this->SetMode(opermh, true);
 355         this->oper = info;
 356         this->WriteCommand("MODE", "+o");
 357         FOREACH_MOD(OnOper, (this, info->name));
 358
 359         std::string opername;
 360         if (info->oper_block)
 361                 opername = info->oper_block->getString("name");
 362
 363         if (IS_LOCAL(this))
 364         {
 365                 LocalUser* l = IS_LOCAL(this);
 366                 std::string vhost = oper->getConfig("vhost");
 367                 if (!vhost.empty())
 368                         l->ChangeDisplayedHost(vhost.c_str());
 369                 std::string opClass = oper->getConfig("class");
 370                 if (!opClass.empty())
 371                         l->SetClass(opClass);
 372         }
 373
 374         ServerInstance->SNO->WriteToSnoMask('o',"%s (%s@%s) is now an IRC operator of type %s (using oper '%s')",
 375                 nick.c_str(), ident.c_str(), host.c_str(), oper->name.c_str(), opername.c_str());
 376         this->WriteNumeric(RPL_YOUAREOPER, ":You are now %s %s", strchr("aeiouAEIOU", oper->name[0]) ? "an" : "a", oper->name.c_str());
 377
 378         ServerInstance->Logs->Log("OPER", LOG_DEFAULT, "%s opered as type: %s", GetFullRealHost().c_str(), oper->name.c_str());
 379         ServerInstance->Users->all_opers.push_back(this);
 380
 381         // Expand permissions from config for faster lookup
 382         if (IS_LOCAL(this))
 383                 oper->init();
 384
 385         FOREACH_MOD(OnPostOper, (this, oper->name, opername));
 386 }
 387
 388 void OperInfo::init()
 389 {
 390         AllowedOperCommands.clear();
 391         AllowedPrivs.clear();
 392         AllowedUserModes.reset();
 393         AllowedChanModes.reset();
 394         AllowedUserModes['o' - 'A'] = true; // Call me paranoid if you want.
 395
 396         for(std::vector<reference<ConfigTag> >::iterator iter = class_blocks.begin(); iter != class_blocks.end(); ++iter)
 397         {
 398                 ConfigTag* tag = *iter;
 399                 std::string mycmd, mypriv;
 400                 /* Process commands */
 401                 irc::spacesepstream CommandList(tag->getString("commands"));
 402                 while (CommandList.GetToken(mycmd))
 403                 {
 404                         AllowedOperCommands.insert(mycmd);
 405                 }
 406
 407                 irc::spacesepstream PrivList(tag->getString("privs"));
 408                 while (PrivList.GetToken(mypriv))
 409                 {
 410                         AllowedPrivs.insert(mypriv);
 411                 }
 412
 413                 std::string modes = tag->getString("usermodes");
 414                 for (std::string::const_iterator c = modes.begin(); c != modes.end(); ++c)
 415                 {
 416                         if (*c == '*')
 417                         {
 418                                 this->AllowedUserModes.set();
 419                         }
 420                         else if (*c >= 'A' && *c < 'z')
 421                         {
 422                                 this->AllowedUserModes[*c - 'A'] = true;
 423                         }
 424                 }
 425
 426                 modes = tag->getString("chanmodes");
 427                 for (std::string::const_iterator c = modes.begin(); c != modes.end(); ++c)
 428                 {
 429                         if (*c == '*')
 430                         {
 431                                 this->AllowedChanModes.set();
 432                         }
 433                         else if (*c >= 'A' && *c < 'z')
 434                         {
 435                                 this->AllowedChanModes[*c - 'A'] = true;
 436                         }
 437                 }
 438         }
 439 }
 440
 441 void User::UnOper()
 442 {
 443         if (!this->IsOper())
 444                 return;
 445
 446         /*
 447          * unset their oper type (what IS_OPER checks).
 448          * note, order is important - this must come before modes as -o attempts
 449          * to call UnOper. -- w00t
 450          */
 451         oper = NULL;
 452
 453
 454         /* Remove all oper only modes from the user when the deoper - Bug #466*/
 455         std::string moderemove("-");
 456
 457         for (unsigned char letter = 'A'; letter <= 'z'; letter++)
 458         {
 459                 ModeHandler* mh = ServerInstance->Modes->FindMode(letter, MODETYPE_USER);
 460                 if (mh && mh->NeedsOper())
 461                         moderemove += letter;
 462         }
 463
 464
 465         std::vector<std::string> parameters;
 466         parameters.push_back(this->nick);
 467         parameters.push_back(moderemove);
 468
 469         ServerInstance->Modes->Process(parameters, this);
 470
 471         // Remove the user from the oper list
 472         stdalgo::vector::swaperase(ServerInstance->Users->all_opers, this);
 473
 474         ModeHandler* opermh = ServerInstance->Modes->FindMode('o', MODETYPE_USER);
 475         this->SetMode(opermh, false);
 476 }
 477
 478 /*
 479  * Check class restrictions
 480  */
 481 void LocalUser::CheckClass(bool clone_count)
 482 {
 483         ConnectClass* a = this->MyClass;
 484
 485         if (!a)
 486         {
 487                 ServerInstance->Users->QuitUser(this, "Access denied by configuration");
 488                 return;
 489         }
 490         else if (a->type == CC_DENY)
 491         {
 492                 ServerInstance->Users->QuitUser(this, a->config->getString("reason", "Unauthorised connection"));
 493                 return;
 494         }
 495         else if (clone_count)
 496         {
 497                 const UserManager::CloneCounts& clonecounts = ServerInstance->Users->GetCloneCounts(this);
 498                 if ((a->GetMaxLocal()) && (clonecounts.local > a->GetMaxLocal()))
 499                 {
 500                         ServerInstance->Users->QuitUser(this, "No more connections allowed from your host via this connect class (local)");
 501                         if (a->maxconnwarn)
 502                                 ServerInstance->SNO->WriteToSnoMask('a', "WARNING: maximum LOCAL connections (%ld) exceeded for IP %s", a->GetMaxLocal(), this->GetIPString().c_str());
 503                         return;
 504                 }
 505                 else if ((a->GetMaxGlobal()) && (clonecounts.global > a->GetMaxGlobal()))
 506                 {
 507                         ServerInstance->Users->QuitUser(this, "No more connections allowed from your host via this connect class (global)");
 508                         if (a->maxconnwarn)
 509                                 ServerInstance->SNO->WriteToSnoMask('a', "WARNING: maximum GLOBAL connections (%ld) exceeded for IP %s", a->GetMaxGlobal(), this->GetIPString().c_str());
 510                         return;
 511                 }
 512         }
 513
 514         this->nping = ServerInstance->Time() + a->GetPingTime() + ServerInstance->Config->dns_timeout;
 515 }
 516
 517 bool LocalUser::CheckLines(bool doZline)
 518 {
 519         const char* check[] = { "G" , "K", (doZline) ? "Z" : NULL, NULL };
 520
 521         if (!this->exempt)
 522         {
 523                 for (int n = 0; check[n]; ++n)
 524                 {
 525                         XLine *r = ServerInstance->XLines->MatchesLine(check[n], this);
 526
 527                         if (r)
 528                         {
 529                                 r->Apply(this);
 530                                 return true;
 531                         }
 532                 }
 533         }
 534
 535         return false;
 536 }
 537
 538 void LocalUser::FullConnect()
 539 {
 540         ServerInstance->stats.Connects++;
 541         this->idle_lastmsg = ServerInstance->Time();
 542
 543         /*
 544          * You may be thinking "wtf, we checked this in User::AddClient!" - and yes, we did, BUT.
 545          * At the time AddClient is called, we don't have a resolved host, by here we probably do - which
 546          * may put the user into a totally seperate class with different restrictions! so we *must* check again.
 547          * Don't remove this! -- w00t
 548          */
 549         MyClass = NULL;
 550         SetClass();
 551         CheckClass();
 552         CheckLines();
 553
 554         if (quitting)
 555                 return;
 556
 557         this->WriteNumeric(RPL_WELCOME, ":Welcome to the %s IRC Network %s", ServerInstance->Config->Network.c_str(), GetFullRealHost().c_str());
 558         this->WriteNumeric(RPL_YOURHOSTIS, ":Your host is %s, running version %s", ServerInstance->Config->ServerName.c_str(), INSPIRCD_BRANCH);
 559         this->WriteNumeric(RPL_SERVERCREATED, ":This server was created %s %s", __TIME__, __DATE__);
 560
 561         const std::string& modelist = ServerInstance->Modes->GetModeListFor004Numeric();
 562         this->WriteNumeric(RPL_SERVERVERSION, "%s %s %s", ServerInstance->Config->ServerName.c_str(), INSPIRCD_BRANCH, modelist.c_str());
 563
 564         ServerInstance->ISupport.SendTo(this);
 565
 566         /* Now registered */
 567         if (ServerInstance->Users->unregistered_count)
 568                 ServerInstance->Users->unregistered_count--;
 569
 570         /* Trigger MOTD and LUSERS output, give modules a chance too */
 571         ModResult MOD_RESULT;
 572         std::string command("LUSERS");
 573         std::vector<std::string> parameters;
 574         FIRST_MOD_RESULT(OnPreCommand, MOD_RESULT, (command, parameters, this, true, command));
 575         if (!MOD_RESULT)
 576                 ServerInstance->Parser.CallHandler(command, parameters, this);
 577
 578         MOD_RESULT = MOD_RES_PASSTHRU;
 579         command = "MOTD";
 580         FIRST_MOD_RESULT(OnPreCommand, MOD_RESULT, (command, parameters, this, true, command));
 581         if (!MOD_RESULT)
 582                 ServerInstance->Parser.CallHandler(command, parameters, this);
 583
 584         if (ServerInstance->Config->RawLog)
 585                 WriteServ("PRIVMSG %s :*** Raw I/O logging is enabled on this server. All messages, passwords, and commands are being recorded.", nick.c_str());
 586
 587         /*
 588          * We don't set REG_ALL until triggering OnUserConnect, so some module events don't spew out stuff
 589          * for a user that doesn't exist yet.
 590          */
 591         FOREACH_MOD(OnUserConnect, (this));
 592
 593         this->registered = REG_ALL;
 594
 595         FOREACH_MOD(OnPostConnect, (this));
 596
 597         ServerInstance->SNO->WriteToSnoMask('c',"Client connecting on port %d (class %s): %s (%s) [%s]",
 598                 this->GetServerPort(), this->MyClass->name.c_str(), GetFullRealHost().c_str(), this->GetIPString().c_str(), this->fullname.c_str());
 599         ServerInstance->Logs->Log("BANCACHE", LOG_DEBUG, "BanCache: Adding NEGATIVE hit for " + this->GetIPString());
 600         ServerInstance->BanCache.AddHit(this->GetIPString(), "", "");
 601         // reset the flood penalty (which could have been raised due to things like auto +x)
 602         CommandFloodPenalty = 0;
 603 }
 604
 605 void User::InvalidateCache()
 606 {
 607         /* Invalidate cache */
 608         cached_fullhost.clear();
 609         cached_hostip.clear();
 610         cached_makehost.clear();
 611         cached_fullrealhost.clear();
 612 }
 613
 614 bool User::ChangeNick(const std::string& newnick, bool force, time_t newts)
 615 {
 616         if (quitting)
 617         {
 618                 ServerInstance->Logs->Log("USERS", LOG_DEFAULT, "ERROR: Attempted to change nick of a quitting user: " + this->nick);
 619                 return false;
 620         }
 621
 622         LocalUser* const localuser = IS_LOCAL(this);
 623         if (!force && localuser)
 624         {
 625                 ModResult MOD_RESULT;
 626                 FIRST_MOD_RESULT(OnUserPreNick, MOD_RESULT, (localuser, newnick));
 627
 628                 // If a module denied the change, abort now
 629                 if (MOD_RESULT == MOD_RES_DENY)
 630                         return false;
 631
 632                 // Disallow the nick change if <security:restrictbannedusers> is on and there is a ban matching this user in
 633                 // one of the channels they are on
 634                 if (ServerInstance->Config->RestrictBannedUsers)
 635                 {
 636                         for (UCListIter i = this->chans.begin(); i != this->chans.end(); ++i)
 637                         {
 638                                 Channel* chan = (*i)->chan;
 639                                 if (chan->GetPrefixValue(this) < VOICE_VALUE && chan->IsBanned(this))
 640                                 {
 641                                         this->WriteNumeric(ERR_CANNOTSENDTOCHAN, "%s :Cannot send to channel (you're banned)", chan->name.c_str());
 642                                         return false;
 643                                 }
 644                         }
 645                 }
 646         }
 647
 648         if (assign(newnick) == assign(nick))
 649         {
 650                 // case change, don't need to check campers
 651                 // and, if it's identical including case, we can leave right now
 652                 // We also don't update the nick TS if it's a case change, either
 653                 if (newnick == nick)
 654                         return true;
 655         }
 656         else
 657         {
 658                 /*
 659                  * Uh oh.. if the nickname is in use, and it's not in use by the person using it (doh) --
 660                  * then we have a potential collide. Check whether someone else is camping on the nick
 661                  * (i.e. connect -> send NICK, don't send USER.) If they are camping, force-change the
 662                  * camper to their UID, and allow the incoming nick change.
 663                  *
 664                  * If the guy using the nick is already using it, tell the incoming nick change to gtfo,
 665                  * because the nick is already (rightfully) in use. -- w00t
 666                  */
 667                 User* InUse = ServerInstance->FindNickOnly(newnick);
 668                 if (InUse && (InUse != this))
 669                 {
 670                         if (InUse->registered != REG_ALL)
 671                         {
 672                                 /* force the camper to their UUID, and ask them to re-send a NICK. */
 673                                 InUse->WriteFrom(InUse, "NICK %s", InUse->uuid.c_str());
 674                                 InUse->WriteNumeric(ERR_NICKNAMEINUSE, "%s :Nickname overruled.", InUse->nick.c_str());
 675
 676                                 ServerInstance->Users->clientlist.erase(InUse->nick);
 677                                 ServerInstance->Users->clientlist[InUse->uuid] = InUse;
 678
 679                                 InUse->nick = InUse->uuid;
 680                                 InUse->InvalidateCache();
 681                                 InUse->registered &= ~REG_NICK;
 682                         }
 683                         else
 684                         {
 685                                 /* No camping, tell the incoming user  to stop trying to change nick ;p */
 686                                 this->WriteNumeric(ERR_NICKNAMEINUSE, "%s :Nickname is already in use.", newnick.c_str());
 687                                 return false;
 688                         }
 689                 }
 690
 691                 age = newts ? newts : ServerInstance->Time();
 692         }
 693
 694         if (this->registered == REG_ALL)
 695                 this->WriteCommon("NICK %s",newnick.c_str());
 696         std::string oldnick = nick;
 697         nick = newnick;
 698
 699         InvalidateCache();
 700         ServerInstance->Users->clientlist.erase(oldnick);
 701         ServerInstance->Users->clientlist[newnick] = this;
 702
 703         if (registered == REG_ALL)
 704                 FOREACH_MOD(OnUserPostNick, (this,oldnick));
 705
 706         return true;
 707 }
 708
 709 int LocalUser::GetServerPort()
 710 {
 711         switch (this->server_sa.sa.sa_family)
 712         {
 713                 case AF_INET6:
 714                         return htons(this->server_sa.in6.sin6_port);
 715                 case AF_INET:
 716                         return htons(this->server_sa.in4.sin_port);
 717         }
 718         return 0;
 719 }
 720
 721 const std::string& User::GetIPString()
 722 {
 723         int port;
 724         if (cachedip.empty())
 725         {
 726                 irc::sockets::satoap(client_sa, cachedip, port);
 727                 /* IP addresses starting with a : on irc are a Bad Thing (tm) */
 728                 if (cachedip[0] == ':')
 729                         cachedip.insert(cachedip.begin(),1,'0');
 730         }
 731
 732         return cachedip;
 733 }
 734
 735 irc::sockets::cidr_mask User::GetCIDRMask()
 736 {
 737         int range = 0;
 738         switch (client_sa.sa.sa_family)
 739         {
 740                 case AF_INET6:
 741                         range = ServerInstance->Config->c_ipv6_range;
 742                         break;
 743                 case AF_INET:
 744                         range = ServerInstance->Config->c_ipv4_range;
 745                         break;
 746         }
 747         return irc::sockets::cidr_mask(client_sa, range);
 748 }
 749
 750 bool User::SetClientIP(const char* sip, bool recheck_eline)
 751 {
 752         cachedip.clear();
 753         cached_hostip.clear();
 754         return irc::sockets::aptosa(sip, 0, client_sa);
 755 }
 756
 757 void User::SetClientIP(const irc::sockets::sockaddrs& sa, bool recheck_eline)
 758 {
 759         cachedip.clear();
 760         cached_hostip.clear();
 761         memcpy(&client_sa, &sa, sizeof(irc::sockets::sockaddrs));
 762 }
 763
 764 bool LocalUser::SetClientIP(const char* sip, bool recheck_eline)
 765 {
 766         irc::sockets::sockaddrs sa;
 767         if (!irc::sockets::aptosa(sip, 0, sa))
 768                 // Invalid
 769                 return false;
 770
 771         LocalUser::SetClientIP(sa, recheck_eline);
 772         return true;
 773 }
 774
 775 void LocalUser::SetClientIP(const irc::sockets::sockaddrs& sa, bool recheck_eline)
 776 {
 777         if (sa != client_sa)
 778         {
 779                 User::SetClientIP(sa);
 780                 if (recheck_eline)
 781                         this->exempt = (ServerInstance->XLines->MatchesLine("E", this) != NULL);
 782
 783                 FOREACH_MOD(OnSetUserIP, (this));
 784         }
 785 }
 786
 787 static std::string wide_newline("\r\n");
 788
 789 void User::Write(const std::string& text)
 790 {
 791 }
 792
 793 void User::Write(const char *text, ...)
 794 {
 795 }
 796
 797 void LocalUser::Write(const std::string& text)
 798 {
 799         if (!SocketEngine::BoundsCheckFd(&eh))
 800                 return;
 801
 802         if (text.length() > ServerInstance->Config->Limits.MaxLine - 2)
 803         {
 804                 // this should happen rarely or never. Crop the string at 512 and try again.
 805                 std::string try_again = text.substr(0, ServerInstance->Config->Limits.MaxLine - 2);
 806                 Write(try_again);
 807                 return;
 808         }
 809
 810         ServerInstance->Logs->Log("USEROUTPUT", LOG_RAWIO, "C[%s] O %s", uuid.c_str(), text.c_str());
 811
 812         eh.AddWriteBuf(text);
 813         eh.AddWriteBuf(wide_newline);
 814
 815         ServerInstance->stats.Sent += text.length() + 2;
 816         this->bytes_out += text.length() + 2;
 817         this->cmds_out++;
 818 }
 819
 820 /** Write()
 821  */
 822 void LocalUser::Write(const char *text, ...)
 823 {
 824         std::string textbuffer;
 825         VAFORMAT(textbuffer, text, text);
 826         this->Write(textbuffer);
 827 }
 828
 829 void User::WriteServ(const std::string& text)
 830 {
 831         this->Write(":%s %s",ServerInstance->Config->ServerName.c_str(),text.c_str());
 832 }
 833
 834 /** WriteServ()
 835  *  Same as Write(), except `text' is prefixed with `:server.name '.
 836  */
 837 void User::WriteServ(const char* text, ...)
 838 {
 839         std::string textbuffer;
 840         VAFORMAT(textbuffer, text, text);
 841         this->WriteServ(textbuffer);
 842 }
 843
 844 void User::WriteCommand(const char* command, const std::string& text)
 845 {
 846         this->WriteServ(command + (this->registered & REG_NICK ? " " + this->nick : " *") + " " + text);
 847 }
 848
 849 void User::WriteNumeric(unsigned int numeric, const char* text, ...)
 850 {
 851         std::string textbuffer;
 852         VAFORMAT(textbuffer, text, text);
 853         this->WriteNumeric(numeric, textbuffer);
 854 }
 855
 856 void User::WriteNumeric(unsigned int numeric, const std::string &text)
 857 {
 858         ModResult MOD_RESULT;
 859
 860         FIRST_MOD_RESULT(OnNumeric, MOD_RESULT, (this, numeric, text));
 861
 862         if (MOD_RESULT == MOD_RES_DENY)
 863                 return;
 864
 865         const std::string message = InspIRCd::Format(":%s %03u %s %s", ServerInstance->Config->ServerName.c_str(),
 866                 numeric, this->registered & REG_NICK ? this->nick.c_str() : "*", text.c_str());
 867         this->Write(message);
 868 }
 869
 870 void User::WriteFrom(User *user, const std::string &text)
 871 {
 872         const std::string message = ":" + user->GetFullHost() + " " + text;
 873         this->Write(message);
 874 }
 875
 876
 877 /* write text from an originating user to originating user */
 878
 879 void User::WriteFrom(User *user, const char* text, ...)
 880 {
 881         std::string textbuffer;
 882         VAFORMAT(textbuffer, text, text);
 883         this->WriteFrom(user, textbuffer);
 884 }
 885
 886 void User::WriteCommon(const char* text, ...)
 887 {
 888         if (this->registered != REG_ALL || quitting)
 889                 return;
 890
 891         std::string textbuffer;
 892         VAFORMAT(textbuffer, text, text);
 893         textbuffer = ":" + this->GetFullHost() + " " + textbuffer;
 894         this->WriteCommonRaw(textbuffer, true);
 895 }
 896
 897 void User::WriteCommonRaw(const std::string &line, bool include_self)
 898 {
 899         if (this->registered != REG_ALL || quitting)
 900                 return;
 901
 902         LocalUser::already_sent_id++;
 903
 904         IncludeChanList include_c(chans.begin(), chans.end());
 905         std::map<User*,bool> exceptions;
 906
 907         exceptions[this] = include_self;
 908
 909         FOREACH_MOD(OnBuildNeighborList, (this, include_c, exceptions));
 910
 911         for (std::map<User*,bool>::iterator i = exceptions.begin(); i != exceptions.end(); ++i)
 912         {
 913                 LocalUser* u = IS_LOCAL(i->first);
 914                 if (u && !u->quitting)
 915                 {
 916                         u->already_sent = LocalUser::already_sent_id;
 917                         if (i->second)
 918                                 u->Write(line);
 919                 }
 920         }
 921         for (IncludeChanList::const_iterator v = include_c.begin(); v != include_c.end(); ++v)
 922         {
 923                 Channel* c = (*v)->chan;
 924                 const UserMembList* ulist = c->GetUsers();
 925                 for (UserMembList::const_iterator i = ulist->begin(); i != ulist->end(); i++)
 926                 {
 927                         LocalUser* u = IS_LOCAL(i->first);
 928                         if (u && u->already_sent != LocalUser::already_sent_id)
 929                         {
 930                                 u->already_sent = LocalUser::already_sent_id;
 931                                 u->Write(line);
 932                         }
 933                 }
 934         }
 935 }
 936
 937 void User::WriteCommonQuit(const std::string &normal_text, const std::string &oper_text)
 938 {
 939         if (this->registered != REG_ALL)
 940                 return;
 941
 942         already_sent_t uniq_id = ++LocalUser::already_sent_id;
 943
 944         const std::string normalMessage = ":" + this->GetFullHost() + " QUIT :" + normal_text;
 945         const std::string operMessage = ":" + this->GetFullHost() + " QUIT :" + oper_text;
 946
 947         IncludeChanList include_c(chans.begin(), chans.end());
 948         std::map<User*,bool> exceptions;
 949
 950         FOREACH_MOD(OnBuildNeighborList, (this, include_c, exceptions));
 951
 952         for (std::map<User*,bool>::iterator i = exceptions.begin(); i != exceptions.end(); ++i)
 953         {
 954                 LocalUser* u = IS_LOCAL(i->first);
 955                 if (u && !u->quitting)
 956                 {
 957                         u->already_sent = uniq_id;
 958                         if (i->second)
 959                                 u->Write(u->IsOper() ? operMessage : normalMessage);
 960                 }
 961         }
 962         for (IncludeChanList::const_iterator v = include_c.begin(); v != include_c.end(); ++v)
 963         {
 964                 const UserMembList* ulist = (*v)->chan->GetUsers();
 965                 for (UserMembList::const_iterator i = ulist->begin(); i != ulist->end(); i++)
 966                 {
 967                         LocalUser* u = IS_LOCAL(i->first);
 968                         if (u && (u->already_sent != uniq_id))
 969                         {
 970                                 u->already_sent = uniq_id;
 971                                 u->Write(u->IsOper() ? operMessage : normalMessage);
 972                         }
 973                 }
 974         }
 975 }
 976
 977 void LocalUser::SendText(const std::string& line)
 978 {
 979         Write(line);
 980 }
 981
 982 void RemoteUser::SendText(const std::string& line)
 983 {
 984         ServerInstance->PI->PushToClient(this, line);
 985 }
 986
 987 void FakeUser::SendText(const std::string& line)
 988 {
 989 }
 990
 991 void User::SendText(const char *text, ...)
 992 {
 993         std::string line;
 994         VAFORMAT(line, text, text);
 995         SendText(line);
 996 }
 997
 998 void User::SendText(const std::string& linePrefix, std::stringstream& textStream)
 999 {
1000         std::string line;
1001         std::string word;
1002         while (textStream >> word)
1003         {
1004                 size_t lineLength = linePrefix.length() + line.length() + word.length() + 3; // "\s\n\r"
1005                 if (lineLength > ServerInstance->Config->Limits.MaxLine)
1006                 {
1007                         SendText(linePrefix + line);
1008                         line.clear();
1009                 }
1010                 line += " " + word;
1011         }
1012         SendText(linePrefix + line);
1013 }
1014
1015 /* return 0 or 1 depending if users u and u2 share one or more common channels
1016  * (used by QUIT, NICK etc which arent channel specific notices)
1017  *
1018  * The old algorithm in 1.0 for this was relatively inefficient, iterating over
1019  * the first users channels then the second users channels within the outer loop,
1020  * therefore it was a maximum of x*y iterations (upon returning 0 and checking
1021  * all possible iterations). However this new function instead checks against the
1022  * channel's userlist in the inner loop which is a std::map<User*,User*>
1023  * and saves us time as we already know what pointer value we are after.
1024  * Don't quote me on the maths as i am not a mathematician or computer scientist,
1025  * but i believe this algorithm is now x+(log y) maximum iterations instead.
1026  */
1027 bool User::SharesChannelWith(User *other)
1028 {
1029         /* Outer loop */
1030         for (UCListIter i = this->chans.begin(); i != this->chans.end(); i++)
1031         {
1032                 /* Eliminate the inner loop (which used to be ~equal in size to the outer loop)
1033                  * by replacing it with a map::find which *should* be more efficient
1034                  */
1035                 if ((*i)->chan->HasUser(other))
1036                         return true;
1037         }
1038         return false;
1039 }
1040
1041 bool User::ChangeName(const std::string& gecos)
1042 {
1043         if (!this->fullname.compare(gecos))
1044                 return true;
1045
1046         if (IS_LOCAL(this))
1047         {
1048                 ModResult MOD_RESULT;
1049                 FIRST_MOD_RESULT(OnChangeLocalUserGECOS, MOD_RESULT, (IS_LOCAL(this),gecos));
1050                 if (MOD_RESULT == MOD_RES_DENY)
1051                         return false;
1052                 FOREACH_MOD(OnChangeName, (this,gecos));
1053         }
1054         this->fullname.assign(gecos, 0, ServerInstance->Config->Limits.MaxGecos);
1055
1056         return true;
1057 }
1058
1059 bool User::ChangeDisplayedHost(const std::string& shost)
1060 {
1061         if (dhost == shost)
1062                 return true;
1063
1064         if (IS_LOCAL(this))
1065         {
1066                 ModResult MOD_RESULT;
1067                 FIRST_MOD_RESULT(OnChangeLocalUserHost, MOD_RESULT, (IS_LOCAL(this),shost));
1068                 if (MOD_RESULT == MOD_RES_DENY)
1069                         return false;
1070         }
1071
1072         FOREACH_MOD(OnChangeHost, (this,shost));
1073
1074         this->dhost.assign(shost, 0, ServerInstance->Config->Limits.MaxHost);
1075         this->InvalidateCache();
1076
1077         if (IS_LOCAL(this))
1078                 this->WriteNumeric(RPL_YOURDISPLAYEDHOST, "%s :is now your displayed host", this->dhost.c_str());
1079
1080         return true;
1081 }
1082
1083 bool User::ChangeIdent(const std::string& newident)
1084 {
1085         if (this->ident == newident)
1086                 return true;
1087
1088         FOREACH_MOD(OnChangeIdent, (this,newident));
1089
1090         this->ident.assign(newident, 0, ServerInstance->Config->Limits.IdentMax);
1091         this->InvalidateCache();
1092
1093         return true;
1094 }
1095
1096 /*
1097  * Sets a user's connection class.
1098  * If the class name is provided, it will be used. Otherwise, the class will be guessed using host/ip/ident/etc.
1099  * NOTE: If the <ALLOW> or <DENY> tag specifies an ip, and this user resolves,
1100  * then their ip will be taken as 'priority' anyway, so for example,
1101  * <connect allow="127.0.0.1"> will match joe!bloggs@localhost
1102  */
1103 void LocalUser::SetClass(const std::string &explicit_name)
1104 {
1105         ConnectClass *found = NULL;
1106
1107         ServerInstance->Logs->Log("CONNECTCLASS", LOG_DEBUG, "Setting connect class for UID %s", this->uuid.c_str());
1108
1109         if (!explicit_name.empty())
1110         {
1111                 for (ClassVector::iterator i = ServerInstance->Config->Classes.begin(); i != ServerInstance->Config->Classes.end(); i++)
1112                 {
1113                         ConnectClass* c = *i;
1114
1115                         if (explicit_name == c->name)
1116                         {
1117                                 ServerInstance->Logs->Log("CONNECTCLASS", LOG_DEBUG, "Explicitly set to %s", explicit_name.c_str());
1118                                 found = c;
1119                         }
1120                 }
1121         }
1122         else
1123         {
1124                 for (ClassVector::iterator i = ServerInstance->Config->Classes.begin(); i != ServerInstance->Config->Classes.end(); i++)
1125                 {
1126                         ConnectClass* c = *i;
1127                         ServerInstance->Logs->Log("CONNECTCLASS", LOG_DEBUG, "Checking %s", c->GetName().c_str());
1128
1129                         ModResult MOD_RESULT;
1130                         FIRST_MOD_RESULT(OnSetConnectClass, MOD_RESULT, (this,c));
1131                         if (MOD_RESULT == MOD_RES_DENY)
1132                                 continue;
1133                         if (MOD_RESULT == MOD_RES_ALLOW)
1134                         {
1135                                 ServerInstance->Logs->Log("CONNECTCLASS", LOG_DEBUG, "Class forced by module to %s", c->GetName().c_str());
1136                                 found = c;
1137                                 break;
1138                         }
1139
1140                         if (c->type == CC_NAMED)
1141                                 continue;
1142
1143                         bool regdone = (registered != REG_NONE);
1144                         if (c->config->getBool("registered", regdone) != regdone)
1145                                 continue;
1146
1147                         /* check if host matches.. */
1148                         if (!InspIRCd::MatchCIDR(this->GetIPString(), c->GetHost(), NULL) &&
1149                             !InspIRCd::MatchCIDR(this->host, c->GetHost(), NULL))
1150                         {
1151                                 ServerInstance->Logs->Log("CONNECTCLASS", LOG_DEBUG, "No host match (for %s)", c->GetHost().c_str());
1152                                 continue;
1153                         }
1154
1155                         /*
1156                          * deny change if change will take class over the limit check it HERE, not after we found a matching class,
1157                          * because we should attempt to find another class if this one doesn't match us. -- w00t
1158                          */
1159                         if (c->limit && (c->GetReferenceCount() >= c->limit))
1160                         {
1161                                 ServerInstance->Logs->Log("CONNECTCLASS", LOG_DEBUG, "OOPS: Connect class limit (%lu) hit, denying", c->limit);
1162                                 continue;
1163                         }
1164
1165                         /* if it requires a port ... */
1166                         int port = c->config->getInt("port");
1167                         if (port)
1168                         {
1169                                 ServerInstance->Logs->Log("CONNECTCLASS", LOG_DEBUG, "Requires port (%d)", port);
1170
1171                                 /* and our port doesn't match, fail. */
1172                                 if (this->GetServerPort() != port)
1173                                         continue;
1174                         }
1175
1176                         if (regdone && !c->config->getString("password").empty())
1177                         {
1178                                 if (!ServerInstance->PassCompare(this, c->config->getString("password"), password, c->config->getString("hash")))
1179                                 {
1180                                         ServerInstance->Logs->Log("CONNECTCLASS", LOG_DEBUG, "Bad password, skipping");
1181                                         continue;
1182                                 }
1183                         }
1184
1185                         /* we stop at the first class that meets ALL critera. */
1186                         found = c;
1187                         break;
1188                 }
1189         }
1190
1191         /*
1192          * Okay, assuming we found a class that matches.. switch us into that class, keeping refcounts up to date.
1193          */
1194         if (found)
1195         {
1196                 MyClass = found;
1197         }
1198 }
1199
1200 void User::PurgeEmptyChannels()
1201 {
1202         // firstly decrement the count on each channel
1203         for (UCListIter i = this->chans.begin(); i != this->chans.end(); )
1204         {
1205                 Channel* c = (*i)->chan;
1206                 ++i;
1207                 c->DelUser(this);
1208         }
1209
1210         this->UnOper();
1211 }
1212
1213 const std::string& FakeUser::GetFullHost()
1214 {
1215         if (!ServerInstance->Config->HideWhoisServer.empty())
1216                 return ServerInstance->Config->HideWhoisServer;
1217         return server->GetName();
1218 }
1219
1220 const std::string& FakeUser::GetFullRealHost()
1221 {
1222         if (!ServerInstance->Config->HideWhoisServer.empty())
1223                 return ServerInstance->Config->HideWhoisServer;
1224         return server->GetName();
1225 }
1226
1227 ConnectClass::ConnectClass(ConfigTag* tag, char t, const std::string& mask)
1228         : config(tag), type(t), fakelag(true), name("unnamed"), registration_timeout(0), host(mask),
1229         pingtime(0), softsendqmax(0), hardsendqmax(0), recvqmax(0),
1230         penaltythreshold(0), commandrate(0), maxlocal(0), maxglobal(0), maxconnwarn(true), maxchans(ServerInstance->Config->MaxChans),
1231         limit(0), resolvehostnames(true)
1232 {
1233 }
1234
1235 ConnectClass::ConnectClass(ConfigTag* tag, char t, const std::string& mask, const ConnectClass& parent)
1236         : config(tag), type(t), fakelag(parent.fakelag), name("unnamed"),
1237         registration_timeout(parent.registration_timeout), host(mask), pingtime(parent.pingtime),
1238         softsendqmax(parent.softsendqmax), hardsendqmax(parent.hardsendqmax), recvqmax(parent.recvqmax),
1239         penaltythreshold(parent.penaltythreshold), commandrate(parent.commandrate),
1240         maxlocal(parent.maxlocal), maxglobal(parent.maxglobal), maxconnwarn(parent.maxconnwarn), maxchans(parent.maxchans),
1241         limit(parent.limit), resolvehostnames(parent.resolvehostnames)
1242 {
1243 }
1244
1245 void ConnectClass::Update(const ConnectClass* src)
1246 {
1247         config = src->config;
1248         type = src->type;
1249         fakelag = src->fakelag;
1250         name = src->name;
1251         registration_timeout = src->registration_timeout;
1252         host = src->host;
1253         pingtime = src->pingtime;
1254         softsendqmax = src->softsendqmax;
1255         hardsendqmax = src->hardsendqmax;
1256         recvqmax = src->recvqmax;
1257         penaltythreshold = src->penaltythreshold;
1258         commandrate = src->commandrate;
1259         maxlocal = src->maxlocal;
1260         maxglobal = src->maxglobal;
1261         maxconnwarn = src->maxconnwarn;
1262         maxchans = src->maxchans;
1263         limit = src->limit;
1264         resolvehostnames = src->resolvehostnames;
1265 }