]> git.netwichtig.de Git - user/henk/code/inspircd.git/blob - src/users.cpp
Reject nickname case changes too when enforcing <security:restrictbannedusers>
[user/henk/code/inspircd.git] / src / users.cpp
1 /*
2  * InspIRCd -- Internet Relay Chat Daemon
3  *
4  *   Copyright (C) 2009-2010 Daniel De Graaf <danieldg@inspircd.org>
5  *   Copyright (C) 2006-2009 Robin Burchell <robin+git@viroteck.net>
6  *   Copyright (C) 2006-2007, 2009 Dennis Friis <peavey@inspircd.org>
7  *   Copyright (C) 2008 John Brooks <john.brooks@dereferenced.net>
8  *   Copyright (C) 2008 Thomas Stagner <aquanight@inspircd.org>
9  *   Copyright (C) 2008 Oliver Lupton <oliverlupton@gmail.com>
10  *   Copyright (C) 2003-2008 Craig Edwards <craigedwards@brainbox.cc>
11  *
12  * This file is part of InspIRCd.  InspIRCd is free software: you can
13  * redistribute it and/or modify it under the terms of the GNU General Public
14  * License as published by the Free Software Foundation, version 2.
15  *
16  * This program is distributed in the hope that it will be useful, but WITHOUT
17  * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS
18  * FOR A PARTICULAR PURPOSE.  See the GNU General Public License for more
19  * details.
20  *
21  * You should have received a copy of the GNU General Public License
22  * along with this program.  If not, see <http://www.gnu.org/licenses/>.
23  */
24
25
26 #include "inspircd.h"
27 #include "xline.h"
28
29 already_sent_t LocalUser::already_sent_id = 0;
30
31 bool User::IsNoticeMaskSet(unsigned char sm)
32 {
33         if (!isalpha(sm))
34                 return false;
35         return (snomasks[sm-65]);
36 }
37
38 bool User::IsModeSet(unsigned char m)
39 {
40         ModeHandler* mh = ServerInstance->Modes->FindMode(m, MODETYPE_USER);
41         return (mh && modes[mh->GetId()]);
42 }
43
44 const char* User::FormatModes(bool showparameters)
45 {
46         static std::string data;
47         std::string params;
48         data.clear();
49
50         for (unsigned char n = 0; n < 64; n++)
51         {
52                 ModeHandler* mh = ServerInstance->Modes->FindMode(n + 65, MODETYPE_USER);
53                 if (mh && IsModeSet(mh))
54                 {
55                         data.push_back(n + 65);
56                         if (showparameters && mh->GetNumParams(true))
57                         {
58                                 std::string p = mh->GetUserParameter(this);
59                                 if (p.length())
60                                         params.append(" ").append(p);
61                         }
62                 }
63         }
64         data += params;
65         return data.c_str();
66 }
67
68 User::User(const std::string& uid, Server* srv, int type)
69         : uuid(uid), server(srv), usertype(type)
70 {
71         age = ServerInstance->Time();
72         signon = 0;
73         registered = 0;
74         quitting = false;
75         client_sa.sa.sa_family = AF_UNSPEC;
76
77         ServerInstance->Logs->Log("USERS", LOG_DEBUG, "New UUID for user: %s", uuid.c_str());
78
79         if (!ServerInstance->Users->uuidlist.insert(std::make_pair(uuid, this)).second)
80                 throw CoreException("Duplicate UUID "+std::string(uuid)+" in User constructor");
81 }
82
83 LocalUser::LocalUser(int myfd, irc::sockets::sockaddrs* client, irc::sockets::sockaddrs* servaddr)
84         : User(ServerInstance->UIDGen.GetUID(), ServerInstance->FakeClient->server, USERTYPE_LOCAL), eh(this),
85         bytes_in(0), bytes_out(0), cmds_in(0), cmds_out(0), nping(0), CommandFloodPenalty(0),
86         already_sent(0)
87 {
88         exempt = quitting_sendq = false;
89         idle_lastmsg = 0;
90         ident = "unknown";
91         lastping = 0;
92         eh.SetFd(myfd);
93         memcpy(&client_sa, client, sizeof(irc::sockets::sockaddrs));
94         memcpy(&server_sa, servaddr, sizeof(irc::sockets::sockaddrs));
95         dhost = host = GetIPString();
96 }
97
98 User::~User()
99 {
100         if (ServerInstance->FindUUID(uuid))
101                 ServerInstance->Logs->Log("USERS", LOG_DEFAULT, "User destructor for %s called without cull", uuid.c_str());
102 }
103
104 const std::string& User::MakeHost()
105 {
106         if (!this->cached_makehost.empty())
107                 return this->cached_makehost;
108
109         // XXX: Is there really a need to cache this?
110         this->cached_makehost = ident + "@" + host;
111         return this->cached_makehost;
112 }
113
114 const std::string& User::MakeHostIP()
115 {
116         if (!this->cached_hostip.empty())
117                 return this->cached_hostip;
118
119         // XXX: Is there really a need to cache this?
120         this->cached_hostip = ident + "@" + this->GetIPString();
121         return this->cached_hostip;
122 }
123
124 const std::string& User::GetFullHost()
125 {
126         if (!this->cached_fullhost.empty())
127                 return this->cached_fullhost;
128
129         // XXX: Is there really a need to cache this?
130         this->cached_fullhost = nick + "!" + ident + "@" + dhost;
131         return this->cached_fullhost;
132 }
133
134 const std::string& User::GetFullRealHost()
135 {
136         if (!this->cached_fullrealhost.empty())
137                 return this->cached_fullrealhost;
138
139         // XXX: Is there really a need to cache this?
140         this->cached_fullrealhost = nick + "!" + ident + "@" + host;
141         return this->cached_fullrealhost;
142 }
143
144 InviteList& LocalUser::GetInviteList()
145 {
146         RemoveExpiredInvites();
147         return invites;
148 }
149
150 bool LocalUser::RemoveInvite(Channel* chan)
151 {
152         Invitation* inv = Invitation::Find(chan, this);
153         if (inv)
154         {
155                 delete inv;
156                 return true;
157         }
158         return false;
159 }
160
161 void LocalUser::RemoveExpiredInvites()
162 {
163         Invitation::Find(NULL, this);
164 }
165
166 bool User::HasModePermission(unsigned char, ModeType)
167 {
168         return true;
169 }
170
171 bool LocalUser::HasModePermission(unsigned char mode, ModeType type)
172 {
173         if (!this->IsOper())
174                 return false;
175
176         if (mode < 'A' || mode > ('A' + 64)) return false;
177
178         return ((type == MODETYPE_USER ? oper->AllowedUserModes : oper->AllowedChanModes))[(mode - 'A')];
179
180 }
181 /*
182  * users on remote servers can completely bypass all permissions based checks.
183  * This prevents desyncs when one server has different type/class tags to another.
184  * That having been said, this does open things up to the possibility of source changes
185  * allowing remote kills, etc - but if they have access to the src, they most likely have
186  * access to the conf - so it's an end to a means either way.
187  */
188 bool User::HasPermission(const std::string&)
189 {
190         return true;
191 }
192
193 bool LocalUser::HasPermission(const std::string &command)
194 {
195         // are they even an oper at all?
196         if (!this->IsOper())
197         {
198                 return false;
199         }
200
201         if (oper->AllowedOperCommands.find(command) != oper->AllowedOperCommands.end())
202                 return true;
203         else if (oper->AllowedOperCommands.find("*") != oper->AllowedOperCommands.end())
204                 return true;
205
206         return false;
207 }
208
209 bool User::HasPrivPermission(const std::string &privstr, bool noisy)
210 {
211         return true;
212 }
213
214 bool LocalUser::HasPrivPermission(const std::string &privstr, bool noisy)
215 {
216         if (!this->IsOper())
217         {
218                 if (noisy)
219                         this->WriteNotice("You are not an oper");
220                 return false;
221         }
222
223         if (oper->AllowedPrivs.find(privstr) != oper->AllowedPrivs.end())
224         {
225                 return true;
226         }
227         else if (oper->AllowedPrivs.find("*") != oper->AllowedPrivs.end())
228         {
229                 return true;
230         }
231
232         if (noisy)
233                 this->WriteNotice("Oper type " + oper->name + " does not have access to priv " + privstr);
234
235         return false;
236 }
237
238 void UserIOHandler::OnDataReady()
239 {
240         if (user->quitting)
241                 return;
242
243         if (recvq.length() > user->MyClass->GetRecvqMax() && !user->HasPrivPermission("users/flood/increased-buffers"))
244         {
245                 ServerInstance->Users->QuitUser(user, "RecvQ exceeded");
246                 ServerInstance->SNO->WriteToSnoMask('a', "User %s RecvQ of %lu exceeds connect class maximum of %lu",
247                         user->nick.c_str(), (unsigned long)recvq.length(), user->MyClass->GetRecvqMax());
248                 return;
249         }
250         unsigned long sendqmax = ULONG_MAX;
251         if (!user->HasPrivPermission("users/flood/increased-buffers"))
252                 sendqmax = user->MyClass->GetSendqSoftMax();
253         unsigned long penaltymax = ULONG_MAX;
254         if (!user->HasPrivPermission("users/flood/no-fakelag"))
255                 penaltymax = user->MyClass->GetPenaltyThreshold() * 1000;
256
257         while (user->CommandFloodPenalty < penaltymax && getSendQSize() < sendqmax)
258         {
259                 std::string line;
260                 line.reserve(ServerInstance->Config->Limits.MaxLine);
261                 std::string::size_type qpos = 0;
262                 while (qpos < recvq.length())
263                 {
264                         char c = recvq[qpos++];
265                         switch (c)
266                         {
267                         case '\0':
268                                 c = ' ';
269                                 break;
270                         case '\r':
271                                 continue;
272                         case '\n':
273                                 goto eol_found;
274                         }
275                         if (line.length() < ServerInstance->Config->Limits.MaxLine - 2)
276                                 line.push_back(c);
277                 }
278                 // if we got here, the recvq ran out before we found a newline
279                 return;
280 eol_found:
281                 // just found a newline. Terminate the string, and pull it out of recvq
282                 recvq = recvq.substr(qpos);
283
284                 // TODO should this be moved to when it was inserted in recvq?
285                 ServerInstance->stats.Recv += qpos;
286                 user->bytes_in += qpos;
287                 user->cmds_in++;
288
289                 ServerInstance->Parser.ProcessBuffer(line, user);
290                 if (user->quitting)
291                         return;
292         }
293         if (user->CommandFloodPenalty >= penaltymax && !user->MyClass->fakelag)
294                 ServerInstance->Users->QuitUser(user, "Excess Flood");
295 }
296
297 void UserIOHandler::AddWriteBuf(const std::string &data)
298 {
299         if (user->quitting_sendq)
300                 return;
301         if (!user->quitting && getSendQSize() + data.length() > user->MyClass->GetSendqHardMax() &&
302                 !user->HasPrivPermission("users/flood/increased-buffers"))
303         {
304                 user->quitting_sendq = true;
305                 ServerInstance->GlobalCulls.AddSQItem(user);
306                 return;
307         }
308
309         // We still want to append data to the sendq of a quitting user,
310         // e.g. their ERROR message that says 'closing link'
311
312         WriteData(data);
313 }
314
315 void UserIOHandler::OnError(BufferedSocketError)
316 {
317         ServerInstance->Users->QuitUser(user, getError());
318 }
319
320 CullResult User::cull()
321 {
322         if (!quitting)
323                 ServerInstance->Users->QuitUser(this, "Culled without QuitUser");
324
325         if (client_sa.sa.sa_family != AF_UNSPEC)
326                 ServerInstance->Users->RemoveCloneCounts(this);
327
328         return Extensible::cull();
329 }
330
331 CullResult LocalUser::cull()
332 {
333         ServerInstance->Users->local_users.erase(this);
334         ClearInvites();
335         eh.cull();
336         return User::cull();
337 }
338
339 CullResult FakeUser::cull()
340 {
341         // Fake users don't quit, they just get culled.
342         quitting = true;
343         // Fake users are not inserted into UserManager::clientlist, they're only in the uuidlist
344         ServerInstance->Users->uuidlist.erase(uuid);
345         return User::cull();
346 }
347
348 void User::Oper(OperInfo* info)
349 {
350         ModeHandler* opermh = ServerInstance->Modes->FindMode('o', MODETYPE_USER);
351         if (this->IsModeSet(opermh))
352                 this->UnOper();
353
354         this->SetMode(opermh, true);
355         this->oper = info;
356         this->WriteCommand("MODE", "+o");
357         FOREACH_MOD(OnOper, (this, info->name));
358
359         std::string opername;
360         if (info->oper_block)
361                 opername = info->oper_block->getString("name");
362
363         if (IS_LOCAL(this))
364         {
365                 LocalUser* l = IS_LOCAL(this);
366                 std::string vhost = oper->getConfig("vhost");
367                 if (!vhost.empty())
368                         l->ChangeDisplayedHost(vhost.c_str());
369                 std::string opClass = oper->getConfig("class");
370                 if (!opClass.empty())
371                         l->SetClass(opClass);
372         }
373
374         ServerInstance->SNO->WriteToSnoMask('o',"%s (%s@%s) is now an IRC operator of type %s (using oper '%s')",
375                 nick.c_str(), ident.c_str(), host.c_str(), oper->name.c_str(), opername.c_str());
376         this->WriteNumeric(RPL_YOUAREOPER, ":You are now %s %s", strchr("aeiouAEIOU", oper->name[0]) ? "an" : "a", oper->name.c_str());
377
378         ServerInstance->Logs->Log("OPER", LOG_DEFAULT, "%s opered as type: %s", GetFullRealHost().c_str(), oper->name.c_str());
379         ServerInstance->Users->all_opers.push_back(this);
380
381         // Expand permissions from config for faster lookup
382         if (IS_LOCAL(this))
383                 oper->init();
384
385         FOREACH_MOD(OnPostOper, (this, oper->name, opername));
386 }
387
388 void OperInfo::init()
389 {
390         AllowedOperCommands.clear();
391         AllowedPrivs.clear();
392         AllowedUserModes.reset();
393         AllowedChanModes.reset();
394         AllowedUserModes['o' - 'A'] = true; // Call me paranoid if you want.
395
396         for(std::vector<reference<ConfigTag> >::iterator iter = class_blocks.begin(); iter != class_blocks.end(); ++iter)
397         {
398                 ConfigTag* tag = *iter;
399                 std::string mycmd, mypriv;
400                 /* Process commands */
401                 irc::spacesepstream CommandList(tag->getString("commands"));
402                 while (CommandList.GetToken(mycmd))
403                 {
404                         AllowedOperCommands.insert(mycmd);
405                 }
406
407                 irc::spacesepstream PrivList(tag->getString("privs"));
408                 while (PrivList.GetToken(mypriv))
409                 {
410                         AllowedPrivs.insert(mypriv);
411                 }
412
413                 std::string modes = tag->getString("usermodes");
414                 for (std::string::const_iterator c = modes.begin(); c != modes.end(); ++c)
415                 {
416                         if (*c == '*')
417                         {
418                                 this->AllowedUserModes.set();
419                         }
420                         else if (*c >= 'A' && *c < 'z')
421                         {
422                                 this->AllowedUserModes[*c - 'A'] = true;
423                         }
424                 }
425
426                 modes = tag->getString("chanmodes");
427                 for (std::string::const_iterator c = modes.begin(); c != modes.end(); ++c)
428                 {
429                         if (*c == '*')
430                         {
431                                 this->AllowedChanModes.set();
432                         }
433                         else if (*c >= 'A' && *c < 'z')
434                         {
435                                 this->AllowedChanModes[*c - 'A'] = true;
436                         }
437                 }
438         }
439 }
440
441 void User::UnOper()
442 {
443         if (!this->IsOper())
444                 return;
445
446         /*
447          * unset their oper type (what IS_OPER checks).
448          * note, order is important - this must come before modes as -o attempts
449          * to call UnOper. -- w00t
450          */
451         oper = NULL;
452
453
454         /* Remove all oper only modes from the user when the deoper - Bug #466*/
455         std::string moderemove("-");
456
457         for (unsigned char letter = 'A'; letter <= 'z'; letter++)
458         {
459                 ModeHandler* mh = ServerInstance->Modes->FindMode(letter, MODETYPE_USER);
460                 if (mh && mh->NeedsOper())
461                         moderemove += letter;
462         }
463
464
465         std::vector<std::string> parameters;
466         parameters.push_back(this->nick);
467         parameters.push_back(moderemove);
468
469         ServerInstance->Modes->Process(parameters, this);
470
471         // Remove the user from the oper list
472         stdalgo::vector::swaperase(ServerInstance->Users->all_opers, this);
473
474         ModeHandler* opermh = ServerInstance->Modes->FindMode('o', MODETYPE_USER);
475         this->SetMode(opermh, false);
476 }
477
478 /*
479  * Check class restrictions
480  */
481 void LocalUser::CheckClass(bool clone_count)
482 {
483         ConnectClass* a = this->MyClass;
484
485         if (!a)
486         {
487                 ServerInstance->Users->QuitUser(this, "Access denied by configuration");
488                 return;
489         }
490         else if (a->type == CC_DENY)
491         {
492                 ServerInstance->Users->QuitUser(this, a->config->getString("reason", "Unauthorised connection"));
493                 return;
494         }
495         else if (clone_count)
496         {
497                 const UserManager::CloneCounts& clonecounts = ServerInstance->Users->GetCloneCounts(this);
498                 if ((a->GetMaxLocal()) && (clonecounts.local > a->GetMaxLocal()))
499                 {
500                         ServerInstance->Users->QuitUser(this, "No more connections allowed from your host via this connect class (local)");
501                         if (a->maxconnwarn)
502                                 ServerInstance->SNO->WriteToSnoMask('a', "WARNING: maximum LOCAL connections (%ld) exceeded for IP %s", a->GetMaxLocal(), this->GetIPString().c_str());
503                         return;
504                 }
505                 else if ((a->GetMaxGlobal()) && (clonecounts.global > a->GetMaxGlobal()))
506                 {
507                         ServerInstance->Users->QuitUser(this, "No more connections allowed from your host via this connect class (global)");
508                         if (a->maxconnwarn)
509                                 ServerInstance->SNO->WriteToSnoMask('a', "WARNING: maximum GLOBAL connections (%ld) exceeded for IP %s", a->GetMaxGlobal(), this->GetIPString().c_str());
510                         return;
511                 }
512         }
513
514         this->nping = ServerInstance->Time() + a->GetPingTime() + ServerInstance->Config->dns_timeout;
515 }
516
517 bool LocalUser::CheckLines(bool doZline)
518 {
519         const char* check[] = { "G" , "K", (doZline) ? "Z" : NULL, NULL };
520
521         if (!this->exempt)
522         {
523                 for (int n = 0; check[n]; ++n)
524                 {
525                         XLine *r = ServerInstance->XLines->MatchesLine(check[n], this);
526
527                         if (r)
528                         {
529                                 r->Apply(this);
530                                 return true;
531                         }
532                 }
533         }
534
535         return false;
536 }
537
538 void LocalUser::FullConnect()
539 {
540         ServerInstance->stats.Connects++;
541         this->idle_lastmsg = ServerInstance->Time();
542
543         /*
544          * You may be thinking "wtf, we checked this in User::AddClient!" - and yes, we did, BUT.
545          * At the time AddClient is called, we don't have a resolved host, by here we probably do - which
546          * may put the user into a totally seperate class with different restrictions! so we *must* check again.
547          * Don't remove this! -- w00t
548          */
549         MyClass = NULL;
550         SetClass();
551         CheckClass();
552         CheckLines();
553
554         if (quitting)
555                 return;
556
557         this->WriteNumeric(RPL_WELCOME, ":Welcome to the %s IRC Network %s", ServerInstance->Config->Network.c_str(), GetFullRealHost().c_str());
558         this->WriteNumeric(RPL_YOURHOSTIS, ":Your host is %s, running version %s", ServerInstance->Config->ServerName.c_str(), INSPIRCD_BRANCH);
559         this->WriteNumeric(RPL_SERVERCREATED, ":This server was created %s %s", __TIME__, __DATE__);
560
561         const std::string& modelist = ServerInstance->Modes->GetModeListFor004Numeric();
562         this->WriteNumeric(RPL_SERVERVERSION, "%s %s %s", ServerInstance->Config->ServerName.c_str(), INSPIRCD_BRANCH, modelist.c_str());
563
564         ServerInstance->ISupport.SendTo(this);
565
566         /* Now registered */
567         if (ServerInstance->Users->unregistered_count)
568                 ServerInstance->Users->unregistered_count--;
569
570         /* Trigger MOTD and LUSERS output, give modules a chance too */
571         ModResult MOD_RESULT;
572         std::string command("LUSERS");
573         std::vector<std::string> parameters;
574         FIRST_MOD_RESULT(OnPreCommand, MOD_RESULT, (command, parameters, this, true, command));
575         if (!MOD_RESULT)
576                 ServerInstance->Parser.CallHandler(command, parameters, this);
577
578         MOD_RESULT = MOD_RES_PASSTHRU;
579         command = "MOTD";
580         FIRST_MOD_RESULT(OnPreCommand, MOD_RESULT, (command, parameters, this, true, command));
581         if (!MOD_RESULT)
582                 ServerInstance->Parser.CallHandler(command, parameters, this);
583
584         if (ServerInstance->Config->RawLog)
585                 WriteServ("PRIVMSG %s :*** Raw I/O logging is enabled on this server. All messages, passwords, and commands are being recorded.", nick.c_str());
586
587         /*
588          * We don't set REG_ALL until triggering OnUserConnect, so some module events don't spew out stuff
589          * for a user that doesn't exist yet.
590          */
591         FOREACH_MOD(OnUserConnect, (this));
592
593         this->registered = REG_ALL;
594
595         FOREACH_MOD(OnPostConnect, (this));
596
597         ServerInstance->SNO->WriteToSnoMask('c',"Client connecting on port %d (class %s): %s (%s) [%s]",
598                 this->GetServerPort(), this->MyClass->name.c_str(), GetFullRealHost().c_str(), this->GetIPString().c_str(), this->fullname.c_str());
599         ServerInstance->Logs->Log("BANCACHE", LOG_DEBUG, "BanCache: Adding NEGATIVE hit for " + this->GetIPString());
600         ServerInstance->BanCache.AddHit(this->GetIPString(), "", "");
601         // reset the flood penalty (which could have been raised due to things like auto +x)
602         CommandFloodPenalty = 0;
603 }
604
605 void User::InvalidateCache()
606 {
607         /* Invalidate cache */
608         cached_fullhost.clear();
609         cached_hostip.clear();
610         cached_makehost.clear();
611         cached_fullrealhost.clear();
612 }
613
614 bool User::ChangeNick(const std::string& newnick, bool force, time_t newts)
615 {
616         if (quitting)
617         {
618                 ServerInstance->Logs->Log("USERS", LOG_DEFAULT, "ERROR: Attempted to change nick of a quitting user: " + this->nick);
619                 return false;
620         }
621
622         LocalUser* const localuser = IS_LOCAL(this);
623         if (!force && localuser)
624         {
625                 ModResult MOD_RESULT;
626                 FIRST_MOD_RESULT(OnUserPreNick, MOD_RESULT, (localuser, newnick));
627
628                 // If a module denied the change, abort now
629                 if (MOD_RESULT == MOD_RES_DENY)
630                         return false;
631
632                 // Disallow the nick change if <security:restrictbannedusers> is on and there is a ban matching this user in
633                 // one of the channels they are on
634                 if (ServerInstance->Config->RestrictBannedUsers)
635                 {
636                         for (UCListIter i = this->chans.begin(); i != this->chans.end(); ++i)
637                         {
638                                 Channel* chan = (*i)->chan;
639                                 if (chan->GetPrefixValue(this) < VOICE_VALUE && chan->IsBanned(this))
640                                 {
641                                         this->WriteNumeric(ERR_CANNOTSENDTOCHAN, "%s :Cannot send to channel (you're banned)", chan->name.c_str());
642                                         return false;
643                                 }
644                         }
645                 }
646         }
647
648         if (assign(newnick) == assign(nick))
649         {
650                 // case change, don't need to check Q:lines and such
651                 // and, if it's identical including case, we can leave right now
652                 // We also don't update the nick TS if it's a case change, either
653                 if (newnick == nick)
654                         return true;
655         }
656         else
657         {
658                 /*
659                  * Don't check Q:Lines if it's a server-enforced change, just on the off-chance some fucking *moron*
660                  * tries to Q:Line SIDs, also, this means we just get our way period, as it really should be.
661                  * Thanks Kein for finding this. -- w00t
662                  *
663                  * Also don't check Q:Lines for remote nickchanges, they should have our Q:Lines anyway to enforce themselves.
664                  *              -- w00t
665                  */
666                 if (IS_LOCAL(this) && !force)
667                 {
668                         XLine* mq = ServerInstance->XLines->MatchesLine("Q",newnick);
669                         if (mq)
670                         {
671                                 if (this->registered == REG_ALL)
672                                 {
673                                         ServerInstance->SNO->WriteGlobalSno('a', "Q-Lined nickname %s from %s: %s",
674                                                 newnick.c_str(), GetFullRealHost().c_str(), mq->reason.c_str());
675                                 }
676                                 this->WriteNumeric(ERR_ERRONEUSNICKNAME, "%s :Invalid nickname: %s", newnick.c_str(), mq->reason.c_str());
677                                 return false;
678                         }
679                 }
680
681                 /*
682                  * Uh oh.. if the nickname is in use, and it's not in use by the person using it (doh) --
683                  * then we have a potential collide. Check whether someone else is camping on the nick
684                  * (i.e. connect -> send NICK, don't send USER.) If they are camping, force-change the
685                  * camper to their UID, and allow the incoming nick change.
686                  *
687                  * If the guy using the nick is already using it, tell the incoming nick change to gtfo,
688                  * because the nick is already (rightfully) in use. -- w00t
689                  */
690                 User* InUse = ServerInstance->FindNickOnly(newnick);
691                 if (InUse && (InUse != this))
692                 {
693                         if (InUse->registered != REG_ALL)
694                         {
695                                 /* force the camper to their UUID, and ask them to re-send a NICK. */
696                                 InUse->WriteFrom(InUse, "NICK %s", InUse->uuid.c_str());
697                                 InUse->WriteNumeric(ERR_NICKNAMEINUSE, "%s :Nickname overruled.", InUse->nick.c_str());
698
699                                 ServerInstance->Users->clientlist.erase(InUse->nick);
700                                 ServerInstance->Users->clientlist[InUse->uuid] = InUse;
701
702                                 InUse->nick = InUse->uuid;
703                                 InUse->InvalidateCache();
704                                 InUse->registered &= ~REG_NICK;
705                         }
706                         else
707                         {
708                                 /* No camping, tell the incoming user  to stop trying to change nick ;p */
709                                 this->WriteNumeric(ERR_NICKNAMEINUSE, "%s :Nickname is already in use.", newnick.c_str());
710                                 return false;
711                         }
712                 }
713
714                 age = newts ? newts : ServerInstance->Time();
715         }
716
717         if (this->registered == REG_ALL)
718                 this->WriteCommon("NICK %s",newnick.c_str());
719         std::string oldnick = nick;
720         nick = newnick;
721
722         InvalidateCache();
723         ServerInstance->Users->clientlist.erase(oldnick);
724         ServerInstance->Users->clientlist[newnick] = this;
725
726         if (registered == REG_ALL)
727                 FOREACH_MOD(OnUserPostNick, (this,oldnick));
728
729         return true;
730 }
731
732 int LocalUser::GetServerPort()
733 {
734         switch (this->server_sa.sa.sa_family)
735         {
736                 case AF_INET6:
737                         return htons(this->server_sa.in6.sin6_port);
738                 case AF_INET:
739                         return htons(this->server_sa.in4.sin_port);
740         }
741         return 0;
742 }
743
744 const std::string& User::GetIPString()
745 {
746         int port;
747         if (cachedip.empty())
748         {
749                 irc::sockets::satoap(client_sa, cachedip, port);
750                 /* IP addresses starting with a : on irc are a Bad Thing (tm) */
751                 if (cachedip[0] == ':')
752                         cachedip.insert(cachedip.begin(),1,'0');
753         }
754
755         return cachedip;
756 }
757
758 irc::sockets::cidr_mask User::GetCIDRMask()
759 {
760         int range = 0;
761         switch (client_sa.sa.sa_family)
762         {
763                 case AF_INET6:
764                         range = ServerInstance->Config->c_ipv6_range;
765                         break;
766                 case AF_INET:
767                         range = ServerInstance->Config->c_ipv4_range;
768                         break;
769         }
770         return irc::sockets::cidr_mask(client_sa, range);
771 }
772
773 bool User::SetClientIP(const char* sip, bool recheck_eline)
774 {
775         cachedip.clear();
776         cached_hostip.clear();
777         return irc::sockets::aptosa(sip, 0, client_sa);
778 }
779
780 void User::SetClientIP(const irc::sockets::sockaddrs& sa, bool recheck_eline)
781 {
782         cachedip.clear();
783         cached_hostip.clear();
784         memcpy(&client_sa, &sa, sizeof(irc::sockets::sockaddrs));
785 }
786
787 bool LocalUser::SetClientIP(const char* sip, bool recheck_eline)
788 {
789         irc::sockets::sockaddrs sa;
790         if (!irc::sockets::aptosa(sip, 0, sa))
791                 // Invalid
792                 return false;
793
794         LocalUser::SetClientIP(sa, recheck_eline);
795         return true;
796 }
797
798 void LocalUser::SetClientIP(const irc::sockets::sockaddrs& sa, bool recheck_eline)
799 {
800         if (sa != client_sa)
801         {
802                 User::SetClientIP(sa);
803                 if (recheck_eline)
804                         this->exempt = (ServerInstance->XLines->MatchesLine("E", this) != NULL);
805
806                 FOREACH_MOD(OnSetUserIP, (this));
807         }
808 }
809
810 static std::string wide_newline("\r\n");
811
812 void User::Write(const std::string& text)
813 {
814 }
815
816 void User::Write(const char *text, ...)
817 {
818 }
819
820 void LocalUser::Write(const std::string& text)
821 {
822         if (!SocketEngine::BoundsCheckFd(&eh))
823                 return;
824
825         if (text.length() > ServerInstance->Config->Limits.MaxLine - 2)
826         {
827                 // this should happen rarely or never. Crop the string at 512 and try again.
828                 std::string try_again = text.substr(0, ServerInstance->Config->Limits.MaxLine - 2);
829                 Write(try_again);
830                 return;
831         }
832
833         ServerInstance->Logs->Log("USEROUTPUT", LOG_RAWIO, "C[%s] O %s", uuid.c_str(), text.c_str());
834
835         eh.AddWriteBuf(text);
836         eh.AddWriteBuf(wide_newline);
837
838         ServerInstance->stats.Sent += text.length() + 2;
839         this->bytes_out += text.length() + 2;
840         this->cmds_out++;
841 }
842
843 /** Write()
844  */
845 void LocalUser::Write(const char *text, ...)
846 {
847         std::string textbuffer;
848         VAFORMAT(textbuffer, text, text);
849         this->Write(textbuffer);
850 }
851
852 void User::WriteServ(const std::string& text)
853 {
854         this->Write(":%s %s",ServerInstance->Config->ServerName.c_str(),text.c_str());
855 }
856
857 /** WriteServ()
858  *  Same as Write(), except `text' is prefixed with `:server.name '.
859  */
860 void User::WriteServ(const char* text, ...)
861 {
862         std::string textbuffer;
863         VAFORMAT(textbuffer, text, text);
864         this->WriteServ(textbuffer);
865 }
866
867 void User::WriteCommand(const char* command, const std::string& text)
868 {
869         this->WriteServ(command + (this->registered & REG_NICK ? " " + this->nick : " *") + " " + text);
870 }
871
872 void User::WriteNumeric(unsigned int numeric, const char* text, ...)
873 {
874         std::string textbuffer;
875         VAFORMAT(textbuffer, text, text);
876         this->WriteNumeric(numeric, textbuffer);
877 }
878
879 void User::WriteNumeric(unsigned int numeric, const std::string &text)
880 {
881         ModResult MOD_RESULT;
882
883         FIRST_MOD_RESULT(OnNumeric, MOD_RESULT, (this, numeric, text));
884
885         if (MOD_RESULT == MOD_RES_DENY)
886                 return;
887
888         const std::string message = InspIRCd::Format(":%s %03u %s %s", ServerInstance->Config->ServerName.c_str(),
889                 numeric, this->registered & REG_NICK ? this->nick.c_str() : "*", text.c_str());
890         this->Write(message);
891 }
892
893 void User::WriteFrom(User *user, const std::string &text)
894 {
895         const std::string message = ":" + user->GetFullHost() + " " + text;
896         this->Write(message);
897 }
898
899
900 /* write text from an originating user to originating user */
901
902 void User::WriteFrom(User *user, const char* text, ...)
903 {
904         std::string textbuffer;
905         VAFORMAT(textbuffer, text, text);
906         this->WriteFrom(user, textbuffer);
907 }
908
909 void User::WriteCommon(const char* text, ...)
910 {
911         if (this->registered != REG_ALL || quitting)
912                 return;
913
914         std::string textbuffer;
915         VAFORMAT(textbuffer, text, text);
916         textbuffer = ":" + this->GetFullHost() + " " + textbuffer;
917         this->WriteCommonRaw(textbuffer, true);
918 }
919
920 void User::WriteCommonRaw(const std::string &line, bool include_self)
921 {
922         if (this->registered != REG_ALL || quitting)
923                 return;
924
925         LocalUser::already_sent_id++;
926
927         IncludeChanList include_c(chans.begin(), chans.end());
928         std::map<User*,bool> exceptions;
929
930         exceptions[this] = include_self;
931
932         FOREACH_MOD(OnBuildNeighborList, (this, include_c, exceptions));
933
934         for (std::map<User*,bool>::iterator i = exceptions.begin(); i != exceptions.end(); ++i)
935         {
936                 LocalUser* u = IS_LOCAL(i->first);
937                 if (u && !u->quitting)
938                 {
939                         u->already_sent = LocalUser::already_sent_id;
940                         if (i->second)
941                                 u->Write(line);
942                 }
943         }
944         for (IncludeChanList::const_iterator v = include_c.begin(); v != include_c.end(); ++v)
945         {
946                 Channel* c = (*v)->chan;
947                 const UserMembList* ulist = c->GetUsers();
948                 for (UserMembList::const_iterator i = ulist->begin(); i != ulist->end(); i++)
949                 {
950                         LocalUser* u = IS_LOCAL(i->first);
951                         if (u && u->already_sent != LocalUser::already_sent_id)
952                         {
953                                 u->already_sent = LocalUser::already_sent_id;
954                                 u->Write(line);
955                         }
956                 }
957         }
958 }
959
960 void User::WriteCommonQuit(const std::string &normal_text, const std::string &oper_text)
961 {
962         if (this->registered != REG_ALL)
963                 return;
964
965         already_sent_t uniq_id = ++LocalUser::already_sent_id;
966
967         const std::string normalMessage = ":" + this->GetFullHost() + " QUIT :" + normal_text;
968         const std::string operMessage = ":" + this->GetFullHost() + " QUIT :" + oper_text;
969
970         IncludeChanList include_c(chans.begin(), chans.end());
971         std::map<User*,bool> exceptions;
972
973         FOREACH_MOD(OnBuildNeighborList, (this, include_c, exceptions));
974
975         for (std::map<User*,bool>::iterator i = exceptions.begin(); i != exceptions.end(); ++i)
976         {
977                 LocalUser* u = IS_LOCAL(i->first);
978                 if (u && !u->quitting)
979                 {
980                         u->already_sent = uniq_id;
981                         if (i->second)
982                                 u->Write(u->IsOper() ? operMessage : normalMessage);
983                 }
984         }
985         for (IncludeChanList::const_iterator v = include_c.begin(); v != include_c.end(); ++v)
986         {
987                 const UserMembList* ulist = (*v)->chan->GetUsers();
988                 for (UserMembList::const_iterator i = ulist->begin(); i != ulist->end(); i++)
989                 {
990                         LocalUser* u = IS_LOCAL(i->first);
991                         if (u && (u->already_sent != uniq_id))
992                         {
993                                 u->already_sent = uniq_id;
994                                 u->Write(u->IsOper() ? operMessage : normalMessage);
995                         }
996                 }
997         }
998 }
999
1000 void LocalUser::SendText(const std::string& line)
1001 {
1002         Write(line);
1003 }
1004
1005 void RemoteUser::SendText(const std::string& line)
1006 {
1007         ServerInstance->PI->PushToClient(this, line);
1008 }
1009
1010 void FakeUser::SendText(const std::string& line)
1011 {
1012 }
1013
1014 void User::SendText(const char *text, ...)
1015 {
1016         std::string line;
1017         VAFORMAT(line, text, text);
1018         SendText(line);
1019 }
1020
1021 void User::SendText(const std::string& linePrefix, std::stringstream& textStream)
1022 {
1023         std::string line;
1024         std::string word;
1025         while (textStream >> word)
1026         {
1027                 size_t lineLength = linePrefix.length() + line.length() + word.length() + 3; // "\s\n\r"
1028                 if (lineLength > ServerInstance->Config->Limits.MaxLine)
1029                 {
1030                         SendText(linePrefix + line);
1031                         line.clear();
1032                 }
1033                 line += " " + word;
1034         }
1035         SendText(linePrefix + line);
1036 }
1037
1038 /* return 0 or 1 depending if users u and u2 share one or more common channels
1039  * (used by QUIT, NICK etc which arent channel specific notices)
1040  *
1041  * The old algorithm in 1.0 for this was relatively inefficient, iterating over
1042  * the first users channels then the second users channels within the outer loop,
1043  * therefore it was a maximum of x*y iterations (upon returning 0 and checking
1044  * all possible iterations). However this new function instead checks against the
1045  * channel's userlist in the inner loop which is a std::map<User*,User*>
1046  * and saves us time as we already know what pointer value we are after.
1047  * Don't quote me on the maths as i am not a mathematician or computer scientist,
1048  * but i believe this algorithm is now x+(log y) maximum iterations instead.
1049  */
1050 bool User::SharesChannelWith(User *other)
1051 {
1052         /* Outer loop */
1053         for (UCListIter i = this->chans.begin(); i != this->chans.end(); i++)
1054         {
1055                 /* Eliminate the inner loop (which used to be ~equal in size to the outer loop)
1056                  * by replacing it with a map::find which *should* be more efficient
1057                  */
1058                 if ((*i)->chan->HasUser(other))
1059                         return true;
1060         }
1061         return false;
1062 }
1063
1064 bool User::ChangeName(const std::string& gecos)
1065 {
1066         if (!this->fullname.compare(gecos))
1067                 return true;
1068
1069         if (IS_LOCAL(this))
1070         {
1071                 ModResult MOD_RESULT;
1072                 FIRST_MOD_RESULT(OnChangeLocalUserGECOS, MOD_RESULT, (IS_LOCAL(this),gecos));
1073                 if (MOD_RESULT == MOD_RES_DENY)
1074                         return false;
1075                 FOREACH_MOD(OnChangeName, (this,gecos));
1076         }
1077         this->fullname.assign(gecos, 0, ServerInstance->Config->Limits.MaxGecos);
1078
1079         return true;
1080 }
1081
1082 bool User::ChangeDisplayedHost(const std::string& shost)
1083 {
1084         if (dhost == shost)
1085                 return true;
1086
1087         if (IS_LOCAL(this))
1088         {
1089                 ModResult MOD_RESULT;
1090                 FIRST_MOD_RESULT(OnChangeLocalUserHost, MOD_RESULT, (IS_LOCAL(this),shost));
1091                 if (MOD_RESULT == MOD_RES_DENY)
1092                         return false;
1093         }
1094
1095         FOREACH_MOD(OnChangeHost, (this,shost));
1096
1097         this->dhost.assign(shost, 0, ServerInstance->Config->Limits.MaxHost);
1098         this->InvalidateCache();
1099
1100         if (IS_LOCAL(this))
1101                 this->WriteNumeric(RPL_YOURDISPLAYEDHOST, "%s :is now your displayed host", this->dhost.c_str());
1102
1103         return true;
1104 }
1105
1106 bool User::ChangeIdent(const std::string& newident)
1107 {
1108         if (this->ident == newident)
1109                 return true;
1110
1111         FOREACH_MOD(OnChangeIdent, (this,newident));
1112
1113         this->ident.assign(newident, 0, ServerInstance->Config->Limits.IdentMax);
1114         this->InvalidateCache();
1115
1116         return true;
1117 }
1118
1119 /*
1120  * Sets a user's connection class.
1121  * If the class name is provided, it will be used. Otherwise, the class will be guessed using host/ip/ident/etc.
1122  * NOTE: If the <ALLOW> or <DENY> tag specifies an ip, and this user resolves,
1123  * then their ip will be taken as 'priority' anyway, so for example,
1124  * <connect allow="127.0.0.1"> will match joe!bloggs@localhost
1125  */
1126 void LocalUser::SetClass(const std::string &explicit_name)
1127 {
1128         ConnectClass *found = NULL;
1129
1130         ServerInstance->Logs->Log("CONNECTCLASS", LOG_DEBUG, "Setting connect class for UID %s", this->uuid.c_str());
1131
1132         if (!explicit_name.empty())
1133         {
1134                 for (ClassVector::iterator i = ServerInstance->Config->Classes.begin(); i != ServerInstance->Config->Classes.end(); i++)
1135                 {
1136                         ConnectClass* c = *i;
1137
1138                         if (explicit_name == c->name)
1139                         {
1140                                 ServerInstance->Logs->Log("CONNECTCLASS", LOG_DEBUG, "Explicitly set to %s", explicit_name.c_str());
1141                                 found = c;
1142                         }
1143                 }
1144         }
1145         else
1146         {
1147                 for (ClassVector::iterator i = ServerInstance->Config->Classes.begin(); i != ServerInstance->Config->Classes.end(); i++)
1148                 {
1149                         ConnectClass* c = *i;
1150                         ServerInstance->Logs->Log("CONNECTCLASS", LOG_DEBUG, "Checking %s", c->GetName().c_str());
1151
1152                         ModResult MOD_RESULT;
1153                         FIRST_MOD_RESULT(OnSetConnectClass, MOD_RESULT, (this,c));
1154                         if (MOD_RESULT == MOD_RES_DENY)
1155                                 continue;
1156                         if (MOD_RESULT == MOD_RES_ALLOW)
1157                         {
1158                                 ServerInstance->Logs->Log("CONNECTCLASS", LOG_DEBUG, "Class forced by module to %s", c->GetName().c_str());
1159                                 found = c;
1160                                 break;
1161                         }
1162
1163                         if (c->type == CC_NAMED)
1164                                 continue;
1165
1166                         bool regdone = (registered != REG_NONE);
1167                         if (c->config->getBool("registered", regdone) != regdone)
1168                                 continue;
1169
1170                         /* check if host matches.. */
1171                         if (!InspIRCd::MatchCIDR(this->GetIPString(), c->GetHost(), NULL) &&
1172                             !InspIRCd::MatchCIDR(this->host, c->GetHost(), NULL))
1173                         {
1174                                 ServerInstance->Logs->Log("CONNECTCLASS", LOG_DEBUG, "No host match (for %s)", c->GetHost().c_str());
1175                                 continue;
1176                         }
1177
1178                         /*
1179                          * deny change if change will take class over the limit check it HERE, not after we found a matching class,
1180                          * because we should attempt to find another class if this one doesn't match us. -- w00t
1181                          */
1182                         if (c->limit && (c->GetReferenceCount() >= c->limit))
1183                         {
1184                                 ServerInstance->Logs->Log("CONNECTCLASS", LOG_DEBUG, "OOPS: Connect class limit (%lu) hit, denying", c->limit);
1185                                 continue;
1186                         }
1187
1188                         /* if it requires a port ... */
1189                         int port = c->config->getInt("port");
1190                         if (port)
1191                         {
1192                                 ServerInstance->Logs->Log("CONNECTCLASS", LOG_DEBUG, "Requires port (%d)", port);
1193
1194                                 /* and our port doesn't match, fail. */
1195                                 if (this->GetServerPort() != port)
1196                                         continue;
1197                         }
1198
1199                         if (regdone && !c->config->getString("password").empty())
1200                         {
1201                                 if (!ServerInstance->PassCompare(this, c->config->getString("password"), password, c->config->getString("hash")))
1202                                 {
1203                                         ServerInstance->Logs->Log("CONNECTCLASS", LOG_DEBUG, "Bad password, skipping");
1204                                         continue;
1205                                 }
1206                         }
1207
1208                         /* we stop at the first class that meets ALL critera. */
1209                         found = c;
1210                         break;
1211                 }
1212         }
1213
1214         /*
1215          * Okay, assuming we found a class that matches.. switch us into that class, keeping refcounts up to date.
1216          */
1217         if (found)
1218         {
1219                 MyClass = found;
1220         }
1221 }
1222
1223 void User::PurgeEmptyChannels()
1224 {
1225         // firstly decrement the count on each channel
1226         for (UCListIter i = this->chans.begin(); i != this->chans.end(); )
1227         {
1228                 Channel* c = (*i)->chan;
1229                 ++i;
1230                 c->DelUser(this);
1231         }
1232
1233         this->UnOper();
1234 }
1235
1236 const std::string& FakeUser::GetFullHost()
1237 {
1238         if (!ServerInstance->Config->HideWhoisServer.empty())
1239                 return ServerInstance->Config->HideWhoisServer;
1240         return server->GetName();
1241 }
1242
1243 const std::string& FakeUser::GetFullRealHost()
1244 {
1245         if (!ServerInstance->Config->HideWhoisServer.empty())
1246                 return ServerInstance->Config->HideWhoisServer;
1247         return server->GetName();
1248 }
1249
1250 ConnectClass::ConnectClass(ConfigTag* tag, char t, const std::string& mask)
1251         : config(tag), type(t), fakelag(true), name("unnamed"), registration_timeout(0), host(mask),
1252         pingtime(0), softsendqmax(0), hardsendqmax(0), recvqmax(0),
1253         penaltythreshold(0), commandrate(0), maxlocal(0), maxglobal(0), maxconnwarn(true), maxchans(ServerInstance->Config->MaxChans),
1254         limit(0), resolvehostnames(true)
1255 {
1256 }
1257
1258 ConnectClass::ConnectClass(ConfigTag* tag, char t, const std::string& mask, const ConnectClass& parent)
1259         : config(tag), type(t), fakelag(parent.fakelag), name("unnamed"),
1260         registration_timeout(parent.registration_timeout), host(mask), pingtime(parent.pingtime),
1261         softsendqmax(parent.softsendqmax), hardsendqmax(parent.hardsendqmax), recvqmax(parent.recvqmax),
1262         penaltythreshold(parent.penaltythreshold), commandrate(parent.commandrate),
1263         maxlocal(parent.maxlocal), maxglobal(parent.maxglobal), maxconnwarn(parent.maxconnwarn), maxchans(parent.maxchans),
1264         limit(parent.limit), resolvehostnames(parent.resolvehostnames)
1265 {
1266 }
1267
1268 void ConnectClass::Update(const ConnectClass* src)
1269 {
1270         config = src->config;
1271         type = src->type;
1272         fakelag = src->fakelag;
1273         name = src->name;
1274         registration_timeout = src->registration_timeout;
1275         host = src->host;
1276         pingtime = src->pingtime;
1277         softsendqmax = src->softsendqmax;
1278         hardsendqmax = src->hardsendqmax;
1279         recvqmax = src->recvqmax;
1280         penaltythreshold = src->penaltythreshold;
1281         commandrate = src->commandrate;
1282         maxlocal = src->maxlocal;
1283         maxglobal = src->maxglobal;
1284         maxconnwarn = src->maxconnwarn;
1285         maxchans = src->maxchans;
1286         limit = src->limit;
1287         resolvehostnames = src->resolvehostnames;
1288 }