]> git.netwichtig.de Git - user/henk/code/inspircd.git/blobdiff - src/modules/m_chanprotect.cpp
OOPS! We try again, since I'm smoking craq. LF is 0x0a NOT CR.
[user/henk/code/inspircd.git] / src / modules / m_chanprotect.cpp
index 74640fe524a5e108dfa64f9ed69d4add58e463a8..87bc1ca4c5299b8148e693216f8021e04a90dca3 100644 (file)
@@ -1 +1,531 @@
-/*       +------------------------------------+\r *       | Inspire Internet Relay Chat Daemon |\r *       +------------------------------------+\r *\r *  InspIRCd: (C) 2002-2007 InspIRCd Development Team\r * See: http://www.inspircd.org/wiki/index.php/Credits\r *\r * This program is free but copyrighted software; see\r *            the file COPYING for details.\r *\r * ---------------------------------------------------\r */\r\r#include "inspircd.h"\r#include "users.h"\r#include "channels.h"\r#include "modules.h"\r\r/* $ModDesc: Provides channel modes +a and +q */\r/* $ModDep: ../../include/u_listmode.h */\r\r#define PROTECT_VALUE 40000\r#define FOUNDER_VALUE 50000\r\rconst char* fakevalue = "on";\r\r/* When this is set to true, no restrictions apply to setting or\r * removal of +qa. This is used while unloading so that the server\r * can freely clear all of its users of the modes.\r */\rbool unload_kludge = false;\r\r/** Handles basic operation of +qa channel modes\r */\rclass FounderProtectBase\r{\r private:\r        InspIRCd* MyInstance;\r  std::string extend;\r    std::string type;\r      int list;\r      int end;\r       char* dummyptr;\r protected:\r    bool& remove_own_privs;\r        bool& remove_other_privs;\r public:\r     FounderProtectBase(InspIRCd* Instance, const std::string &ext, const std::string &mtype, int l, int e, bool &remove_own, bool &remove_others) :\r                MyInstance(Instance), extend(ext), type(mtype), list(l), end(e), remove_own_privs(remove_own), remove_other_privs(remove_others)\r       {\r      }\r\r     ModePair ModeSet(userrec* source, userrec* dest, chanrec* channel, const std::string &parameter)\r       {\r              userrec* x = MyInstance->FindNick(parameter);\r          if (x)\r         {\r                      if (!channel->HasUser(x))\r                      {\r                              return std::make_pair(false, parameter);\r                       }\r                      else\r                   {\r                              std::string item = extend+std::string(channel->name);\r                          if (x->GetExt(item,dummyptr))\r                          {\r                                      return std::make_pair(true, x->nick);\r                          }\r                              else\r                           {\r                                      return std::make_pair(false, parameter);\r                               }\r                      }\r              }\r              return std::make_pair(false, parameter);\r       }\r\r     void RemoveMode(chanrec* channel, char mc)\r     {\r              unload_kludge = true;\r          CUList* cl = channel->GetUsers();\r              std::string item = extend + std::string(channel->name);\r                const char* mode_junk[MAXMODES+2];\r             userrec* n = new userrec(MyInstance);\r          n->SetFd(FD_MAGIC_NUMBER);\r             mode_junk[0] = channel->name;\r          irc::modestacker modestack(false);\r             std::deque<std::string> stackresult;                            \r               for (CUList::iterator i = cl->begin(); i != cl->end(); i++)\r            {\r                      if (i->first->GetExt(item, dummyptr))\r                  {\r                              modestack.Push(mc, i->first->nick);\r                    }\r              }\r\r             while (modestack.GetStackedLine(stackresult))\r          {\r                      for (size_t j = 0; j < stackresult.size(); j++)\r                        {\r                              mode_junk[j+1] = stackresult[j].c_str();\r                       }\r                      MyInstance->SendMode(mode_junk, stackresult.size() + 1, n);\r            }\r              \r               delete n;\r              unload_kludge = false;\r }\r\r     void DisplayList(userrec* user, chanrec* channel)\r      {\r              CUList* cl = channel->GetUsers();\r              std::string item = extend+std::string(channel->name);\r          for (CUList::reverse_iterator i = cl->rbegin(); i != cl->rend(); ++i)\r          {\r                      if (i->first->GetExt(item, dummyptr))\r                  {\r                              user->WriteServ("%d %s %s %s", list, user->nick, channel->name,i->first->nick);\r                        }\r              }\r              user->WriteServ("%d %s %s :End of channel %s list", end, user->nick, channel->name, type.c_str());\r     }\r\r     userrec* FindAndVerify(std::string &parameter, chanrec* channel)\r       {\r              userrec* theuser = MyInstance->FindNick(parameter);\r            if ((!theuser) || (!channel->HasUser(theuser)))\r                {\r                      parameter.clear();\r                     return NULL;\r           }\r              return theuser;\r        }\r\r     bool CanRemoveOthers(userrec* u1, userrec* u2, chanrec* c)\r     {\r              std::string item = extend+std::string(c->name);\r                return (u1->GetExt(item, dummyptr) && u2->GetExt(item, dummyptr));\r     }\r\r     ModeAction HandleChange(userrec* source, userrec* theuser, bool adding, chanrec* channel, std::string &parameter)\r      {\r              std::string item = extend+std::string(channel->name);\r\r         if (adding)\r            {\r                      if (!theuser->GetExt(item, dummyptr))\r                  {\r                              theuser->Extend(item, fakevalue);\r                              parameter = theuser->nick;\r                             return MODEACTION_ALLOW;\r                       }\r              }\r              else\r           {\r                      if (theuser->GetExt(item, dummyptr))\r                   {\r                              theuser->Shrink(item);\r                         parameter = theuser->nick;\r                             return MODEACTION_ALLOW;\r                       }\r              }\r              return MODEACTION_DENY;\r        }\r};\r\r/** Abstraction of FounderProtectBase for channel mode +q\r */\rclass ChanFounder : public ModeHandler, public FounderProtectBase\r{\r        char* dummyptr;\r public:\r       ChanFounder(InspIRCd* Instance, bool using_prefixes, bool &depriv_self, bool &depriv_others)\r           : ModeHandler(Instance, 'q', 1, 1, true, MODETYPE_CHANNEL, false, using_prefixes ? '~' : 0),\r             FounderProtectBase(Instance, "cm_founder_", "founder", 386, 387, depriv_self, depriv_others) { }\r\r    unsigned int GetPrefixRank()\r   {\r              return FOUNDER_VALUE;\r  }\r\r     ModePair ModeSet(userrec* source, userrec* dest, chanrec* channel, const std::string &parameter)\r       {\r              return FounderProtectBase::ModeSet(source, dest, channel, parameter);\r  }\r\r     void RemoveMode(chanrec* channel)\r      {\r              FounderProtectBase::RemoveMode(channel, this->GetModeChar());\r  }\r\r     void RemoveMode(userrec* user)\r {\r      }\r\r     ModeAction OnModeChange(userrec* source, userrec* dest, chanrec* channel, std::string &parameter, bool adding)\r {\r              userrec* theuser = FounderProtectBase::FindAndVerify(parameter, channel);\r\r             if (!theuser)\r          {\r                      return MODEACTION_DENY;\r                }\r\r             if ((!adding) && FounderProtectBase::CanRemoveOthers(source, theuser, channel))\r                {\r                      return FounderProtectBase::HandleChange(source, theuser, adding, channel, parameter);\r          }\r               // source is a server, or ulined, we'll let them +-q the user.\r                if ((unload_kludge) || ((source == theuser) && (!adding) && (FounderProtectBase::remove_own_privs)) || (ServerInstance->ULine(source->nick)) || (ServerInstance->ULine(source->server)) || (!*source->server) || (!IS_LOCAL(source)))\r          {\r                      return FounderProtectBase::HandleChange(source, theuser, adding, channel, parameter);\r          }\r              else\r           {\r                      // whoops, someones being naughty!\r                     source->WriteServ("468 %s %s :Only servers may set channel mode +q",source->nick, channel->name);\r                      parameter.clear();\r                     return MODEACTION_DENY;\r                }\r      }\r\r     void DisplayList(userrec* user, chanrec* channel)\r      {\r              FounderProtectBase::DisplayList(user,channel);\r }\r};\r\r/** Abstraction of FounderProtectBase for channel mode +a\r */\rclass ChanProtect : public ModeHandler, public FounderProtectBase\r{\r        char* dummyptr;\r public:\r       ChanProtect(InspIRCd* Instance, bool using_prefixes, bool &depriv_self, bool &depriv_others)\r           : ModeHandler(Instance, 'a', 1, 1, true, MODETYPE_CHANNEL, false, using_prefixes ? '&' : 0),\r             FounderProtectBase(Instance,"cm_protect_","protected user", 388, 389, depriv_self, depriv_others) { }\r\r       unsigned int GetPrefixRank()\r   {\r              return PROTECT_VALUE;\r  }\r\r     ModePair ModeSet(userrec* source, userrec* dest, chanrec* channel, const std::string &parameter)\r       {\r              return FounderProtectBase::ModeSet(source, dest, channel, parameter);\r  }\r\r     void RemoveMode(chanrec* channel)\r      {\r              FounderProtectBase::RemoveMode(channel, this->GetModeChar());\r  }\r\r     void RemoveMode(userrec* user)\r {\r      }\r\r     ModeAction OnModeChange(userrec* source, userrec* dest, chanrec* channel, std::string &parameter, bool adding)\r {\r              userrec* theuser = FounderProtectBase::FindAndVerify(parameter, channel);\r\r             if (!theuser)\r                  return MODEACTION_DENY;\r\r               std::string founder = "cm_founder_"+std::string(channel->name);\r\r               if ((!adding) && FounderProtectBase::CanRemoveOthers(source, theuser, channel))\r                {\r                      return FounderProtectBase::HandleChange(source, theuser, adding, channel, parameter);\r          }\r              // source has +q, is a server, or ulined, we'll let them +-a the user.\r         if ((unload_kludge) || ((source == theuser) && (!adding) && (FounderProtectBase::remove_own_privs)) || (ServerInstance->ULine(source->nick)) || (ServerInstance->ULine(source->server)) || (!*source->server) || (source->GetExt(founder,dummyptr)) || (!IS_LOCAL(source)))\r            {\r                      return FounderProtectBase::HandleChange(source, theuser, adding, channel, parameter);\r          }\r              else\r           {\r                      // bzzzt, wrong answer!\r                        source->WriteServ("482 %s %s :You are not a channel founder",source->nick, channel->name);\r                     return MODEACTION_DENY;\r                }\r      }\r\r     virtual void DisplayList(userrec* user, chanrec* channel)\r      {\r              FounderProtectBase::DisplayList(user, channel);\r        }\r\r};\r\rclass ModuleChanProtect : public Module\r{\r       \r       bool FirstInGetsFounder;\r       bool QAPrefixes;\r       bool DeprivSelf;\r       bool DeprivOthers;\r     bool booting;\r  ChanProtect* cp;\r       ChanFounder* cf;\r       char* dummyptr;\r        \r public:\r \r    ModuleChanProtect(InspIRCd* Me)\r                : Module(Me), FirstInGetsFounder(false), QAPrefixes(false), DeprivSelf(false), DeprivOthers(false), booting(true)\r      {       \r               /* Load config stuff */\r                OnRehash(NULL,"");\r             booting = false;\r\r              /* Initialise module variables */\r\r             cp = new ChanProtect(ServerInstance,QAPrefixes,DeprivSelf,DeprivOthers);\r               cf = new ChanFounder(ServerInstance,QAPrefixes,DeprivSelf,DeprivOthers);\r\r              if (!ServerInstance->AddMode(cp, 'a') || !ServerInstance->AddMode(cf, 'q'))\r                    throw ModuleException("Could not add new modes!");\r     }\r\r     void Implements(char* List)\r    {\r              List[I_OnUserKick] = List[I_OnUserPart] = List[I_OnRehash] = List[I_OnUserJoin] = List[I_OnAccessCheck] = List[I_OnSyncChannel] = 1;\r   }\r\r     virtual void OnUserKick(userrec* source, userrec* user, chanrec* chan, const std::string &reason, bool &silent)\r        {\r              // FIX: when someone gets kicked from a channel we must remove their Extensibles!\r              user->Shrink("cm_founder_"+std::string(chan->name));\r           user->Shrink("cm_protect_"+std::string(chan->name));\r   }\r\r     virtual void OnUserPart(userrec* user, chanrec* channel, const std::string &partreason, bool &silent)\r  {\r              // FIX: when someone parts a channel we must remove their Extensibles!\r         user->Shrink("cm_founder_"+std::string(channel->name));\r                user->Shrink("cm_protect_"+std::string(channel->name));\r        }\r\r     virtual void OnRehash(userrec* user, const std::string &parameter)\r     {\r              /* Create a configreader class and read our flag,\r               * in old versions this was heap-allocated and the\r              * object was kept between rehashes...now we just\r               * stack-allocate it locally.\r           */\r            ConfigReader Conf(ServerInstance);\r\r            bool old_qa = QAPrefixes;\r\r             FirstInGetsFounder = Conf.ReadFlag("options","noservices",0);\r          QAPrefixes = Conf.ReadFlag("options","qaprefixes",0);\r          DeprivSelf = Conf.ReadFlag("options","deprotectself",0);\r               DeprivOthers = Conf.ReadFlag("options","deprotectothers",0);\r\r          /* Did the user change the QA prefixes on the fly?\r              * If so, remove all instances of the mode, and reinit\r          * the module with prefixes enabled.\r            */\r            if ((old_qa != QAPrefixes) && (!booting))\r              {\r                      ServerInstance->Modes->DelMode(cp);\r                    ServerInstance->Modes->DelMode(cf);\r                    DELETE(cp);\r                    DELETE(cf);\r                    cp = new ChanProtect(ServerInstance,QAPrefixes,DeprivSelf,DeprivOthers);\r                       cf = new ChanFounder(ServerInstance,QAPrefixes,DeprivSelf,DeprivOthers);\r                       /* These wont fail, we already owned the mode characters before */\r                     ServerInstance->AddMode(cp, 'a');\r                      ServerInstance->AddMode(cf, 'q');\r                      ServerInstance->WriteOpers("*** WARNING: +qa prefixes were enabled or disabled via a REHASH. Clients will probably need to reconnect to pick up this change.");\r                }\r      }\r      \r       virtual void OnUserJoin(userrec* user, chanrec* channel, bool &silent)\r {\r              // if the user is the first user into the channel, mark them as the founder, but only if\r               // the config option for it is set\r             if (FirstInGetsFounder)\r                {\r                      if (channel->GetUserCounter() == 1)\r                    {\r                              // we're using Extensible::Extend to add data into user objects.\r                               // this way is best as it adds data thats accessible to other modules\r                          // (so long as you document your code properly) without breaking anything\r                              // because its encapsulated neatly in a map.\r\r                          // Change requested by katsklaw... when the first in is set to get founder,\r                            // to make it clearer that +q has been given, send that one user the +q notice\r                         // so that their client's syncronization and their sanity are left intact.\r                             user->WriteServ("MODE %s +q %s",channel->name,user->nick);\r                             user->Extend("cm_founder_"+std::string(channel->name),fakevalue);\r                      }\r              }\r      }\r      \r       virtual int OnAccessCheck(userrec* source,userrec* dest,chanrec* channel,int access_type)\r      {\r              // here we perform access checks, this is the important bit that actually stops kicking/deopping\r               // etc of protected users. There are many types of access check, we're going to handle\r         // a relatively small number of them relevent to our module using a switch statement.\r          // don't allow action if:\r              // (A) Theyre founder (no matter what)\r         // (B) Theyre protected, and you're not\r                // always allow the action if:\r         // (A) The source is ulined\r            \r               \r               // firstly, if a ulined nick, or a server, is setting the mode, then allow them to set the mode\r                // without any access checks, we're not worthy :p\r              if ((ServerInstance->ULine(source->nick)) || (ServerInstance->ULine(source->server)) || (!*source->server))\r                    return ACR_ALLOW;\r\r             std::string founder = "cm_founder_"+std::string(channel->name);\r                std::string protect = "cm_protect_"+std::string(channel->name);\r\r               switch (access_type)\r           {\r                      // a user has been deopped. Do we let them? hmmm...\r                    case AC_DEOP:\r                          if (dest->GetExt(founder,dummyptr))\r                            {\r                                      source->WriteServ("484 "+std::string(source->nick)+" "+std::string(channel->name)+" :Can't deop "+std::string(dest->nick)+" as they're a channel founder");\r                                    return ACR_DENY;\r                               }\r                              if ((dest->GetExt(protect,dummyptr)) && (!source->GetExt(protect,dummyptr)))\r                           {\r                                      source->WriteServ("484 "+std::string(source->nick)+" "+std::string(channel->name)+" :Can't deop "+std::string(dest->nick)+" as they're protected (+a)");\r                                       return ACR_DENY;\r                               }\r                      break;\r\r                        // a user is being kicked. do we chop off the end of the army boot?\r                    case AC_KICK:\r                          if (dest->GetExt(founder,dummyptr))\r                            {\r                                      source->WriteServ("484 "+std::string(source->nick)+" "+std::string(channel->name)+" :Can't kick "+std::string(dest->nick)+" as they're a channel founder");\r                                    return ACR_DENY;\r                               }\r                              if ((dest->GetExt(protect,dummyptr)) && (!source->GetExt(protect,dummyptr)))\r                           {\r                                      source->WriteServ("484 "+std::string(source->nick)+" "+std::string(channel->name)+" :Can't kick "+std::string(dest->nick)+" as they're protected (+a)");\r                                       return ACR_DENY;\r                               }\r                      break;\r\r                        // a user is being dehalfopped. Yes, we do disallow -h of a +ha user\r                   case AC_DEHALFOP:\r                              if (dest->GetExt(founder,dummyptr))\r                            {\r                                      source->WriteServ("484 "+std::string(source->nick)+" "+std::string(channel->name)+" :Can't de-halfop "+std::string(dest->nick)+" as they're a channel founder");\r                                       return ACR_DENY;\r                               }\r                              if ((dest->GetExt(protect,dummyptr)) && (!source->GetExt(protect,dummyptr)))\r                           {\r                                      source->WriteServ("484 "+std::string(source->nick)+" "+std::string(channel->name)+" :Can't de-halfop "+std::string(dest->nick)+" as they're protected (+a)");\r                                  return ACR_DENY;\r                               }\r                      break;\r\r                        // same with devoice.\r                  case AC_DEVOICE:\r                               if (dest->GetExt(founder,dummyptr))\r                            {\r                                      source->WriteServ("484 "+std::string(source->nick)+" "+std::string(channel->name)+" :Can't devoice "+std::string(dest->nick)+" as they're a channel founder");\r                                 return ACR_DENY;\r                               }\r                              if ((dest->GetExt(protect,dummyptr)) && (!source->GetExt(protect,dummyptr)))\r                           {\r                                      source->WriteServ("484 "+std::string(source->nick)+" "+std::string(channel->name)+" :Can't devoice "+std::string(dest->nick)+" as they're protected (+a)");\r                                    return ACR_DENY;\r                               }\r                      break;\r         }\r              \r               // we dont know what this access check is, or dont care. just carry on, nothing to see here.\r           return ACR_DEFAULT;\r    }\r      \r       virtual ~ModuleChanProtect()\r   {\r              ServerInstance->Modes->DelMode(cp);\r            ServerInstance->Modes->DelMode(cf);\r            DELETE(cp);\r            DELETE(cf);\r    }\r      \r       virtual Version GetVersion()\r   {\r              return Version(1, 1, 0, 0, VF_COMMON | VF_VENDOR, API_VERSION);\r        }\r      \r       virtual void OnSyncChannel(chanrec* chan, Module* proto, void* opaque)\r {\r              /* NOTE: If +qa prefix is on, this is propogated by the channel join,\r           * so we dont need to propogate it manually\r             */\r            if (!QAPrefixes)\r               {\r                      // this is called when the server is linking into a net and wants to sync channel data.\r                        // we should send our mode changes for the channel here to ensure that other servers\r                   // know whos +q/+a on the channel.\r                     CUList* cl = chan->GetUsers();\r                 string_list commands;\r                  std::string founder = "cm_founder_"+std::string(chan->name);\r                   std::string protect = "cm_protect_"+std::string(chan->name);\r                   irc::modestacker modestack(true);\r                      std::deque<std::string> stackresult;\r                   for (CUList::iterator i = cl->begin(); i != cl->end(); i++)\r                    {\r                              if (i->first->GetExt(founder,dummyptr))\r                                {\r                                      modestack.Push('q',i->first->nick);\r                            }\r                              if (i->first->GetExt(protect,dummyptr))\r                                {\r                                      modestack.Push('a',i->first->nick);\r                            }\r                      }\r                      while (modestack.GetStackedLine(stackresult))\r                  {\r                              irc::stringjoiner mode_join(" ", stackresult, 0, stackresult.size() - 1);\r                              std::string line = mode_join.GetJoined();\r                              proto->ProtoSendMode(opaque,TYPE_CHANNEL,chan, line);\r                  }\r              }\r      }\r\r};\r\rMODULE_INIT(ModuleChanProtect)\r
\ No newline at end of file
+/*       +------------------------------------+
+ *       | Inspire Internet Relay Chat Daemon |
+ *       +------------------------------------+
+ *
+ *  InspIRCd: (C) 2002-2007 InspIRCd Development Team
+ * See: http://www.inspircd.org/wiki/index.php/Credits
+ *
+ * This program is free but copyrighted software; see
+ *            the file COPYING for details.
+ *
+ * ---------------------------------------------------
+ */
+
+#include "inspircd.h"
+#include "users.h"
+#include "channels.h"
+#include "modules.h"
+
+/* $ModDesc: Provides channel modes +a and +q */
+/* $ModDep: ../../include/u_listmode.h */
+
+#define PROTECT_VALUE 40000
+#define FOUNDER_VALUE 50000
+
+const char* fakevalue = "on";
+
+/* When this is set to true, no restrictions apply to setting or
+ * removal of +qa. This is used while unloading so that the server
+ * can freely clear all of its users of the modes.
+ */
+bool unload_kludge = false;
+
+/** Handles basic operation of +qa channel modes
+ */
+class FounderProtectBase
+{
+ private:
+       InspIRCd* MyInstance;
+       std::string extend;
+       std::string type;
+       int list;
+       int end;
+       char* dummyptr;
+ protected:
+       bool& remove_own_privs;
+       bool& remove_other_privs;
+ public:
+       FounderProtectBase(InspIRCd* Instance, const std::string &ext, const std::string &mtype, int l, int e, bool &remove_own, bool &remove_others) :
+               MyInstance(Instance), extend(ext), type(mtype), list(l), end(e), remove_own_privs(remove_own), remove_other_privs(remove_others)
+       {
+       }
+
+       ModePair ModeSet(userrec* source, userrec* dest, chanrec* channel, const std::string &parameter)
+       {
+               userrec* x = MyInstance->FindNick(parameter);
+               if (x)
+               {
+                       if (!channel->HasUser(x))
+                       {
+                               return std::make_pair(false, parameter);
+                       }
+                       else
+                       {
+                               std::string item = extend+std::string(channel->name);
+                               if (x->GetExt(item,dummyptr))
+                               {
+                                       return std::make_pair(true, x->nick);
+                               }
+                               else
+                               {
+                                       return std::make_pair(false, parameter);
+                               }
+                       }
+               }
+               return std::make_pair(false, parameter);
+       }
+
+       void RemoveMode(chanrec* channel, char mc)
+       {
+               unload_kludge = true;
+               CUList* cl = channel->GetUsers();
+               std::string item = extend + std::string(channel->name);
+               const char* mode_junk[MAXMODES+2];
+               userrec* n = new userrec(MyInstance);
+               n->SetFd(FD_MAGIC_NUMBER);
+               mode_junk[0] = channel->name;
+               irc::modestacker modestack(false);
+               std::deque<std::string> stackresult;                            
+               for (CUList::iterator i = cl->begin(); i != cl->end(); i++)
+               {
+                       if (i->first->GetExt(item, dummyptr))
+                       {
+                               modestack.Push(mc, i->first->nick);
+                       }
+               }
+
+               while (modestack.GetStackedLine(stackresult))
+               {
+                       for (size_t j = 0; j < stackresult.size(); j++)
+                       {
+                               mode_junk[j+1] = stackresult[j].c_str();
+                       }
+                       MyInstance->SendMode(mode_junk, stackresult.size() + 1, n);
+               }
+               
+               delete n;
+               unload_kludge = false;
+       }
+
+       void DisplayList(userrec* user, chanrec* channel)
+       {
+               CUList* cl = channel->GetUsers();
+               std::string item = extend+std::string(channel->name);
+               for (CUList::reverse_iterator i = cl->rbegin(); i != cl->rend(); ++i)
+               {
+                       if (i->first->GetExt(item, dummyptr))
+                       {
+                               user->WriteServ("%d %s %s %s", list, user->nick, channel->name,i->first->nick);
+                       }
+               }
+               user->WriteServ("%d %s %s :End of channel %s list", end, user->nick, channel->name, type.c_str());
+       }
+
+       userrec* FindAndVerify(std::string &parameter, chanrec* channel)
+       {
+               userrec* theuser = MyInstance->FindNick(parameter);
+               if ((!theuser) || (!channel->HasUser(theuser)))
+               {
+                       parameter.clear();
+                       return NULL;
+               }
+               return theuser;
+       }
+
+       bool CanRemoveOthers(userrec* u1, userrec* u2, chanrec* c)
+       {
+               std::string item = extend+std::string(c->name);
+               return (u1->GetExt(item, dummyptr) && u2->GetExt(item, dummyptr));
+       }
+
+       ModeAction HandleChange(userrec* source, userrec* theuser, bool adding, chanrec* channel, std::string &parameter)
+       {
+               std::string item = extend+std::string(channel->name);
+
+               if (adding)
+               {
+                       if (!theuser->GetExt(item, dummyptr))
+                       {
+                               theuser->Extend(item, fakevalue);
+                               parameter = theuser->nick;
+                               return MODEACTION_ALLOW;
+                       }
+               }
+               else
+               {
+                       if (theuser->GetExt(item, dummyptr))
+                       {
+                               theuser->Shrink(item);
+                               parameter = theuser->nick;
+                               return MODEACTION_ALLOW;
+                       }
+               }
+               return MODEACTION_DENY;
+       }
+};
+
+/** Abstraction of FounderProtectBase for channel mode +q
+ */
+class ChanFounder : public ModeHandler, public FounderProtectBase
+{
+       char* dummyptr;
+ public:
+       ChanFounder(InspIRCd* Instance, bool using_prefixes, bool &depriv_self, bool &depriv_others)
+               : ModeHandler(Instance, 'q', 1, 1, true, MODETYPE_CHANNEL, false, using_prefixes ? '~' : 0),
+                 FounderProtectBase(Instance, "cm_founder_", "founder", 386, 387, depriv_self, depriv_others) { }
+
+       unsigned int GetPrefixRank()
+       {
+               return FOUNDER_VALUE;
+       }
+
+       ModePair ModeSet(userrec* source, userrec* dest, chanrec* channel, const std::string &parameter)
+       {
+               return FounderProtectBase::ModeSet(source, dest, channel, parameter);
+       }
+
+       void RemoveMode(chanrec* channel)
+       {
+               FounderProtectBase::RemoveMode(channel, this->GetModeChar());
+       }
+
+       void RemoveMode(userrec* user)
+       {
+       }
+
+       ModeAction OnModeChange(userrec* source, userrec* dest, chanrec* channel, std::string &parameter, bool adding)
+       {
+               userrec* theuser = FounderProtectBase::FindAndVerify(parameter, channel);
+
+               if (!theuser)
+               {
+                       return MODEACTION_DENY;
+               }
+
+               if ((!adding) && FounderProtectBase::CanRemoveOthers(source, theuser, channel))
+               {
+                       return FounderProtectBase::HandleChange(source, theuser, adding, channel, parameter);
+               }
+                // source is a server, or ulined, we'll let them +-q the user.
+               if ((unload_kludge) || ((source == theuser) && (!adding) && (FounderProtectBase::remove_own_privs)) || (ServerInstance->ULine(source->nick)) || (ServerInstance->ULine(source->server)) || (!*source->server) || (!IS_LOCAL(source)))
+               {
+                       return FounderProtectBase::HandleChange(source, theuser, adding, channel, parameter);
+               }
+               else
+               {
+                       // whoops, someones being naughty!
+                       source->WriteServ("468 %s %s :Only servers may set channel mode +q",source->nick, channel->name);
+                       parameter.clear();
+                       return MODEACTION_DENY;
+               }
+       }
+
+       void DisplayList(userrec* user, chanrec* channel)
+       {
+               FounderProtectBase::DisplayList(user,channel);
+       }
+};
+
+/** Abstraction of FounderProtectBase for channel mode +a
+ */
+class ChanProtect : public ModeHandler, public FounderProtectBase
+{
+       char* dummyptr;
+ public:
+       ChanProtect(InspIRCd* Instance, bool using_prefixes, bool &depriv_self, bool &depriv_others)
+               : ModeHandler(Instance, 'a', 1, 1, true, MODETYPE_CHANNEL, false, using_prefixes ? '&' : 0),
+                 FounderProtectBase(Instance,"cm_protect_","protected user", 388, 389, depriv_self, depriv_others) { }
+
+       unsigned int GetPrefixRank()
+       {
+               return PROTECT_VALUE;
+       }
+
+       ModePair ModeSet(userrec* source, userrec* dest, chanrec* channel, const std::string &parameter)
+       {
+               return FounderProtectBase::ModeSet(source, dest, channel, parameter);
+       }
+
+       void RemoveMode(chanrec* channel)
+       {
+               FounderProtectBase::RemoveMode(channel, this->GetModeChar());
+       }
+
+       void RemoveMode(userrec* user)
+       {
+       }
+
+       ModeAction OnModeChange(userrec* source, userrec* dest, chanrec* channel, std::string &parameter, bool adding)
+       {
+               userrec* theuser = FounderProtectBase::FindAndVerify(parameter, channel);
+
+               if (!theuser)
+                       return MODEACTION_DENY;
+
+               std::string founder = "cm_founder_"+std::string(channel->name);
+
+               if ((!adding) && FounderProtectBase::CanRemoveOthers(source, theuser, channel))
+               {
+                       return FounderProtectBase::HandleChange(source, theuser, adding, channel, parameter);
+               }
+               // source has +q, is a server, or ulined, we'll let them +-a the user.
+               if ((unload_kludge) || ((source == theuser) && (!adding) && (FounderProtectBase::remove_own_privs)) || (ServerInstance->ULine(source->nick)) || (ServerInstance->ULine(source->server)) || (!*source->server) || (source->GetExt(founder,dummyptr)) || (!IS_LOCAL(source)))
+               {
+                       return FounderProtectBase::HandleChange(source, theuser, adding, channel, parameter);
+               }
+               else
+               {
+                       // bzzzt, wrong answer!
+                       source->WriteServ("482 %s %s :You are not a channel founder",source->nick, channel->name);
+                       return MODEACTION_DENY;
+               }
+       }
+
+       virtual void DisplayList(userrec* user, chanrec* channel)
+       {
+               FounderProtectBase::DisplayList(user, channel);
+       }
+
+};
+
+class ModuleChanProtect : public Module
+{
+       
+       bool FirstInGetsFounder;
+       bool QAPrefixes;
+       bool DeprivSelf;
+       bool DeprivOthers;
+       bool booting;
+       ChanProtect* cp;
+       ChanFounder* cf;
+       char* dummyptr;
+       
+ public:
+       ModuleChanProtect(InspIRCd* Me)
+               : Module(Me), FirstInGetsFounder(false), QAPrefixes(false), DeprivSelf(false), DeprivOthers(false), booting(true)
+       {       
+               /* Load config stuff */
+               OnRehash(NULL,"");
+               booting = false;
+
+               /* Initialise module variables */
+
+               cp = new ChanProtect(ServerInstance,QAPrefixes,DeprivSelf,DeprivOthers);
+               cf = new ChanFounder(ServerInstance,QAPrefixes,DeprivSelf,DeprivOthers);
+
+               if (!ServerInstance->AddMode(cp, 'a') || !ServerInstance->AddMode(cf, 'q'))
+                       throw ModuleException("Could not add new modes!");
+       }
+
+       void Implements(char* List)
+       {
+               List[I_OnUserKick] = List[I_OnUserPart] = List[I_OnRehash] = List[I_OnUserJoin] = List[I_OnAccessCheck] = List[I_OnSyncChannel] = 1;
+       }
+
+       virtual void OnUserKick(userrec* source, userrec* user, chanrec* chan, const std::string &reason, bool &silent)
+       {
+               // FIX: when someone gets kicked from a channel we must remove their Extensibles!
+               user->Shrink("cm_founder_"+std::string(chan->name));
+               user->Shrink("cm_protect_"+std::string(chan->name));
+       }
+
+       virtual void OnUserPart(userrec* user, chanrec* channel, const std::string &partreason, bool &silent)
+       {
+               // FIX: when someone parts a channel we must remove their Extensibles!
+               user->Shrink("cm_founder_"+std::string(channel->name));
+               user->Shrink("cm_protect_"+std::string(channel->name));
+       }
+
+       virtual void OnRehash(userrec* user, const std::string &parameter)
+       {
+               /* Create a configreader class and read our flag,
+                * in old versions this was heap-allocated and the
+                * object was kept between rehashes...now we just
+                * stack-allocate it locally.
+                */
+               ConfigReader Conf(ServerInstance);
+
+               bool old_qa = QAPrefixes;
+
+               FirstInGetsFounder = Conf.ReadFlag("options","noservices",0);
+               QAPrefixes = Conf.ReadFlag("options","qaprefixes",0);
+               DeprivSelf = Conf.ReadFlag("options","deprotectself",0);
+               DeprivOthers = Conf.ReadFlag("options","deprotectothers",0);
+
+               /* Did the user change the QA prefixes on the fly?
+                * If so, remove all instances of the mode, and reinit
+                * the module with prefixes enabled.
+                */
+               if ((old_qa != QAPrefixes) && (!booting))
+               {
+                       ServerInstance->Modes->DelMode(cp);
+                       ServerInstance->Modes->DelMode(cf);
+                       DELETE(cp);
+                       DELETE(cf);
+                       cp = new ChanProtect(ServerInstance,QAPrefixes,DeprivSelf,DeprivOthers);
+                       cf = new ChanFounder(ServerInstance,QAPrefixes,DeprivSelf,DeprivOthers);
+                       /* These wont fail, we already owned the mode characters before */
+                       ServerInstance->AddMode(cp, 'a');
+                       ServerInstance->AddMode(cf, 'q');
+                       ServerInstance->WriteOpers("*** WARNING: +qa prefixes were enabled or disabled via a REHASH. Clients will probably need to reconnect to pick up this change.");
+               }
+       }
+       
+       virtual void OnUserJoin(userrec* user, chanrec* channel, bool &silent)
+       {
+               // if the user is the first user into the channel, mark them as the founder, but only if
+               // the config option for it is set
+               if (FirstInGetsFounder)
+               {
+                       if (channel->GetUserCounter() == 1)
+                       {
+                               // we're using Extensible::Extend to add data into user objects.
+                               // this way is best as it adds data thats accessible to other modules
+                               // (so long as you document your code properly) without breaking anything
+                               // because its encapsulated neatly in a map.
+
+                               // Change requested by katsklaw... when the first in is set to get founder,
+                               // to make it clearer that +q has been given, send that one user the +q notice
+                               // so that their client's syncronization and their sanity are left intact.
+                               user->WriteServ("MODE %s +q %s",channel->name,user->nick);
+                               user->Extend("cm_founder_"+std::string(channel->name),fakevalue);
+                       }
+               }
+       }
+       
+       virtual int OnAccessCheck(userrec* source,userrec* dest,chanrec* channel,int access_type)
+       {
+               // here we perform access checks, this is the important bit that actually stops kicking/deopping
+               // etc of protected users. There are many types of access check, we're going to handle
+               // a relatively small number of them relevent to our module using a switch statement.
+               // don't allow action if:
+               // (A) Theyre founder (no matter what)
+               // (B) Theyre protected, and you're not
+               // always allow the action if:
+               // (A) The source is ulined
+               
+               
+               // firstly, if a ulined nick, or a server, is setting the mode, then allow them to set the mode
+               // without any access checks, we're not worthy :p
+               if ((ServerInstance->ULine(source->nick)) || (ServerInstance->ULine(source->server)) || (!*source->server))
+                       return ACR_ALLOW;
+
+               std::string founder = "cm_founder_"+std::string(channel->name);
+               std::string protect = "cm_protect_"+std::string(channel->name);
+
+               switch (access_type)
+               {
+                       // a user has been deopped. Do we let them? hmmm...
+                       case AC_DEOP:
+                               if (dest->GetExt(founder,dummyptr))
+                               {
+                                       source->WriteServ("484 "+std::string(source->nick)+" "+std::string(channel->name)+" :Can't deop "+std::string(dest->nick)+" as they're a channel founder");
+                                       return ACR_DENY;
+                               }
+                               if ((dest->GetExt(protect,dummyptr)) && (!source->GetExt(protect,dummyptr)))
+                               {
+                                       source->WriteServ("484 "+std::string(source->nick)+" "+std::string(channel->name)+" :Can't deop "+std::string(dest->nick)+" as they're protected (+a)");
+                                       return ACR_DENY;
+                               }
+                       break;
+
+                       // a user is being kicked. do we chop off the end of the army boot?
+                       case AC_KICK:
+                               if (dest->GetExt(founder,dummyptr))
+                               {
+                                       source->WriteServ("484 "+std::string(source->nick)+" "+std::string(channel->name)+" :Can't kick "+std::string(dest->nick)+" as they're a channel founder");
+                                       return ACR_DENY;
+                               }
+                               if ((dest->GetExt(protect,dummyptr)) && (!source->GetExt(protect,dummyptr)))
+                               {
+                                       source->WriteServ("484 "+std::string(source->nick)+" "+std::string(channel->name)+" :Can't kick "+std::string(dest->nick)+" as they're protected (+a)");
+                                       return ACR_DENY;
+                               }
+                       break;
+
+                       // a user is being dehalfopped. Yes, we do disallow -h of a +ha user
+                       case AC_DEHALFOP:
+                               if (dest->GetExt(founder,dummyptr))
+                               {
+                                       source->WriteServ("484 "+std::string(source->nick)+" "+std::string(channel->name)+" :Can't de-halfop "+std::string(dest->nick)+" as they're a channel founder");
+                                       return ACR_DENY;
+                               }
+                               if ((dest->GetExt(protect,dummyptr)) && (!source->GetExt(protect,dummyptr)))
+                               {
+                                       source->WriteServ("484 "+std::string(source->nick)+" "+std::string(channel->name)+" :Can't de-halfop "+std::string(dest->nick)+" as they're protected (+a)");
+                                       return ACR_DENY;
+                               }
+                       break;
+
+                       // same with devoice.
+                       case AC_DEVOICE:
+                               if (dest->GetExt(founder,dummyptr))
+                               {
+                                       source->WriteServ("484 "+std::string(source->nick)+" "+std::string(channel->name)+" :Can't devoice "+std::string(dest->nick)+" as they're a channel founder");
+                                       return ACR_DENY;
+                               }
+                               if ((dest->GetExt(protect,dummyptr)) && (!source->GetExt(protect,dummyptr)))
+                               {
+                                       source->WriteServ("484 "+std::string(source->nick)+" "+std::string(channel->name)+" :Can't devoice "+std::string(dest->nick)+" as they're protected (+a)");
+                                       return ACR_DENY;
+                               }
+                       break;
+               }
+               
+               // we dont know what this access check is, or dont care. just carry on, nothing to see here.
+               return ACR_DEFAULT;
+       }
+       
+       virtual ~ModuleChanProtect()
+       {
+               ServerInstance->Modes->DelMode(cp);
+               ServerInstance->Modes->DelMode(cf);
+               DELETE(cp);
+               DELETE(cf);
+       }
+       
+       virtual Version GetVersion()
+       {
+               return Version(1, 1, 0, 0, VF_COMMON | VF_VENDOR, API_VERSION);
+       }
+       
+       virtual void OnSyncChannel(chanrec* chan, Module* proto, void* opaque)
+       {
+               /* NOTE: If +qa prefix is on, this is propogated by the channel join,
+                * so we dont need to propogate it manually
+                */
+               if (!QAPrefixes)
+               {
+                       // this is called when the server is linking into a net and wants to sync channel data.
+                       // we should send our mode changes for the channel here to ensure that other servers
+                       // know whos +q/+a on the channel.
+                       CUList* cl = chan->GetUsers();
+                       string_list commands;
+                       std::string founder = "cm_founder_"+std::string(chan->name);
+                       std::string protect = "cm_protect_"+std::string(chan->name);
+                       irc::modestacker modestack(true);
+                       std::deque<std::string> stackresult;
+                       for (CUList::iterator i = cl->begin(); i != cl->end(); i++)
+                       {
+                               if (i->first->GetExt(founder,dummyptr))
+                               {
+                                       modestack.Push('q',i->first->nick);
+                               }
+                               if (i->first->GetExt(protect,dummyptr))
+                               {
+                                       modestack.Push('a',i->first->nick);
+                               }
+                       }
+                       while (modestack.GetStackedLine(stackresult))
+                       {
+                               irc::stringjoiner mode_join(" ", stackresult, 0, stackresult.size() - 1);
+                               std::string line = mode_join.GetJoined();
+                               proto->ProtoSendMode(opaque,TYPE_CHANNEL,chan, line);
+                       }
+               }
+       }
+
+};
+
+MODULE_INIT(ModuleChanProtect)