]> git.netwichtig.de Git - user/henk/code/inspircd.git/blobdiff - src/users.cpp
Move AllowedPrivs and similar oper information from LocalUser to OperInfo
[user/henk/code/inspircd.git] / src / users.cpp
index 647619ae81e7027ec7b6410b21491de712c2714f..e8e4a482533fedc14c1661e90f8d34319b5fd735 100644 (file)
@@ -11,8 +11,6 @@
  * ---------------------------------------------------
  */
 
-/* $Core */
-
 #include "inspircd.h"
 #include <stdarg.h>
 #include "socketengine.h"
 #include "bancache.h"
 #include "commands/cmd_whowas.h"
 
-static unsigned long uniq_id = 1;
-
-static unsigned long* already_sent = NULL;
-
-LocalIntExt User::NICKForced("NICKForced", NULL);
-LocalStringExt User::OperQuit("OperQuit", NULL);
-
-void InitializeAlreadySent(SocketEngine* SE)
+typedef unsigned int uniq_id_t;
+class sent
 {
-       already_sent = new unsigned long[SE->GetMaxFds()];
-       memset(already_sent, 0, SE->GetMaxFds() * sizeof(unsigned long));
-}
+       uniq_id_t uniq_id;
+       uniq_id_t* array;
+       void init()
+       {
+               if (!array)
+                       array = new uniq_id_t[ServerInstance->SE->GetMaxFds()];
+               memset(array, 0, ServerInstance->SE->GetMaxFds() * sizeof(uniq_id_t));
+               uniq_id++;
+       }
+ public:
+       sent() : uniq_id(static_cast<uniq_id_t>(-1)), array(NULL) {}
+       inline uniq_id_t operator++()
+       {
+               if (++uniq_id == 0)
+                       init();
+               return uniq_id;
+       }
+       inline uniq_id_t& operator[](int i)
+       {
+               return array[i];
+       }
+       ~sent()
+       {
+               delete[] array;
+       }
+};
+
+static sent already_sent;
 
 std::string User::ProcessNoticeMasks(const char *sm)
 {
@@ -99,7 +116,7 @@ std::string User::ProcessNoticeMasks(const char *sm)
        return output;
 }
 
-void User::StartDNSLookup()
+void LocalUser::StartDNSLookup()
 {
        try
        {
@@ -208,22 +225,13 @@ User::User(const std::string &uid)
 {
        server = ServerInstance->Config->ServerName;
        age = ServerInstance->Time();
-       Penalty = 0;
-       lastping = signon = idle_lastmsg = nping = registered = 0;
-       bytes_in = bytes_out = cmds_in = cmds_out = 0;
-       quietquit = quitting = exempt = haspassed = dns_done = false;
+       signon = idle_lastmsg = registered = 0;
+       quietquit = quitting = exempt = dns_done = false;
        fd = -1;
-       server_sa.sa.sa_family = AF_UNSPEC;
+       uuid = uid;
        client_sa.sa.sa_family = AF_UNSPEC;
-       MyClass = NULL;
-       AllowedPrivs = AllowedOperCommands = NULL;
 
-       if (uid.empty())
-               uuid.assign(ServerInstance->GetUID(), 0, UUID_LENGTH - 1);
-       else
-               uuid.assign(uid, 0, UUID_LENGTH - 1);
-
-       ServerInstance->Logs->Log("USERS", DEBUG,"New UUID for user: %s (%s)", uuid.c_str(), uid.empty() ? "allocated new" : "used remote");
+       ServerInstance->Logs->Log("USERS", DEBUG, "New UUID for user: %s", uuid.c_str());
 
        user_hash::iterator finduuid = ServerInstance->Users->uuidlist->find(uuid);
        if (finduuid == ServerInstance->Users->uuidlist->end())
@@ -232,6 +240,14 @@ User::User(const std::string &uid)
                throw CoreException("Duplicate UUID "+std::string(uuid)+" in User constructor");
 }
 
+LocalUser::LocalUser() : User(ServerInstance->GetUID())
+{
+       bytes_in = bytes_out = cmds_in = cmds_out = 0;
+       server_sa.sa.sa_family = AF_UNSPEC;
+       Penalty = 0;
+       lastping = nping = 0;
+}
+
 User::~User()
 {
        if (uuid.length())
@@ -334,7 +350,7 @@ const std::string User::GetFullRealHost()
        return this->cached_fullrealhost;
 }
 
-bool User::IsInvited(const irc::string &channel)
+bool LocalUser::IsInvited(const irc::string &channel)
 {
        time_t now = ServerInstance->Time();
        InvitedList::iterator safei;
@@ -356,7 +372,7 @@ bool User::IsInvited(const irc::string &channel)
        return false;
 }
 
-InvitedList* User::GetInviteList()
+InvitedList* LocalUser::GetInviteList()
 {
        time_t now = ServerInstance->Time();
        /* Weed out expired invites here. */
@@ -374,7 +390,7 @@ InvitedList* User::GetInviteList()
        return &invites;
 }
 
-void User::InviteTo(const irc::string &channel, time_t invtimeout)
+void LocalUser::InviteTo(const irc::string &channel, time_t invtimeout)
 {
        time_t now = ServerInstance->Time();
        if (invtimeout != 0 && now > invtimeout) return; /* Don't add invites that are expired from the get-go. */
@@ -393,7 +409,7 @@ void User::InviteTo(const irc::string &channel, time_t invtimeout)
        invites.push_back(std::make_pair(channel, invtimeout));
 }
 
-void User::RemoveInvite(const irc::string &channel)
+void LocalUser::RemoveInvite(const irc::string &channel)
 {
        for (InvitedList::iterator i = invites.begin(); i != invites.end(); i++)
        {
@@ -405,58 +421,56 @@ void User::RemoveInvite(const irc::string &channel)
        }
 }
 
-bool User::HasModePermission(unsigned char mode, ModeType type)
+bool User::HasModePermission(unsigned char, ModeType)
 {
-       if (!IS_LOCAL(this))
-               return true;
+       return true;
+}
 
+bool LocalUser::HasModePermission(unsigned char mode, ModeType type)
+{
        if (!IS_OPER(this))
                return false;
 
        if (mode < 'A' || mode > ('A' + 64)) return false;
 
-       return ((type == MODETYPE_USER ? AllowedUserModes : AllowedChanModes))[(mode - 'A')];
+       return ((type == MODETYPE_USER ? oper->AllowedUserModes : oper->AllowedChanModes))[(mode - 'A')];
 
 }
-
-bool User::HasPermission(const std::string &command)
+/*
+ * users on remote servers can completely bypass all permissions based checks.
+ * This prevents desyncs when one server has different type/class tags to another.
+ * That having been said, this does open things up to the possibility of source changes
+ * allowing remote kills, etc - but if they have access to the src, they most likely have
+ * access to the conf - so it's an end to a means either way.
+ */
+bool User::HasPermission(const std::string&)
 {
-       /*
-        * users on remote servers can completely bypass all permissions based checks.
-        * This prevents desyncs when one server has different type/class tags to another.
-        * That having been said, this does open things up to the possibility of source changes
-        * allowing remote kills, etc - but if they have access to the src, they most likely have
-        * access to the conf - so it's an end to a means either way.
-        */
-       if (!IS_LOCAL(this))
-               return true;
+       return true;
+}
 
+bool LocalUser::HasPermission(const std::string &command)
+{
        // are they even an oper at all?
        if (!IS_OPER(this))
        {
                return false;
        }
 
-       if (!AllowedOperCommands)
-               return false;
-
-       if (AllowedOperCommands->find(command) != AllowedOperCommands->end())
+       if (oper->AllowedOperCommands.find(command) != oper->AllowedOperCommands.end())
                return true;
-       else if (AllowedOperCommands->find("*") != AllowedOperCommands->end())
+       else if (oper->AllowedOperCommands.find("*") != oper->AllowedOperCommands.end())
                return true;
 
        return false;
 }
 
-
 bool User::HasPrivPermission(const std::string &privstr, bool noisy)
 {
-       if (!IS_LOCAL(this))
-       {
-               ServerInstance->Logs->Log("PRIVS", DEBUG, "Remote (yes)");
-               return true;
-       }
+       return true;
+}
 
+bool LocalUser::HasPrivPermission(const std::string &privstr, bool noisy)
+{
        if (!IS_OPER(this))
        {
                if (noisy)
@@ -464,43 +478,43 @@ bool User::HasPrivPermission(const std::string &privstr, bool noisy)
                return false;
        }
 
-       if (!AllowedPrivs)
-       {
-               if (noisy)
-                       this->WriteServ("NOTICE %s :Privset empty(!?)", this->nick.c_str());
-               return false;
-       }
-
-       if (AllowedPrivs->find(privstr) != AllowedPrivs->end())
+       if (oper->AllowedPrivs.find(privstr) != oper->AllowedPrivs.end())
        {
                return true;
        }
-       else if (AllowedPrivs->find("*") != AllowedPrivs->end())
+       else if (oper->AllowedPrivs.find("*") != oper->AllowedPrivs.end())
        {
                return true;
        }
 
        if (noisy)
-               this->WriteServ("NOTICE %s :Oper type %s does not have access to priv %s", this->nick.c_str(), this->oper.c_str(), privstr.c_str());
+               this->WriteServ("NOTICE %s :Oper type %s does not have access to priv %s", this->nick.c_str(), oper->NameStr(), privstr.c_str());
        return false;
 }
 
 void User::OnDataReady()
+{
+}
+
+void LocalUser::OnDataReady()
 {
        if (quitting)
                return;
 
-       if (MyClass && recvq.length() > MyClass->GetRecvqMax() && !HasPrivPermission("users/flood/increased-buffers"))
+       if (recvq.length() > MyClass->GetRecvqMax() && !HasPrivPermission("users/flood/increased-buffers"))
        {
                ServerInstance->Users->QuitUser(this, "RecvQ exceeded");
                ServerInstance->SNO->WriteToSnoMask('a', "User %s RecvQ of %lu exceeds connect class maximum of %lu",
                        nick.c_str(), (unsigned long)recvq.length(), MyClass->GetRecvqMax());
        }
        unsigned long sendqmax = ULONG_MAX;
-       if (MyClass && !HasPrivPermission("users/flood/increased-buffers"))
+       if (!HasPrivPermission("users/flood/increased-buffers"))
                sendqmax = MyClass->GetSendqSoftMax();
+       int penaltymax = MyClass->GetPenaltyThreshold();
+       if (penaltymax == 0 || HasPrivPermission("users/flood/no-fakelag"))
+               penaltymax = INT_MAX;
 
-       while (Penalty < 10 && getSendQSize() < sendqmax)
+       while (Penalty < penaltymax && getSendQSize() < sendqmax)
        {
                std::string line;
                line.reserve(MAXBUF);
@@ -533,18 +547,17 @@ eol_found:
                this->cmds_in++;
 
                ServerInstance->Parser->ProcessBuffer(line, this);
+               if (quitting)
+                       return;
        }
        // Add pseudo-penalty so that we continue processing after sendq recedes
        if (Penalty == 0 && getSendQSize() >= sendqmax)
                Penalty++;
 }
 
-void User::AddWriteBuf(const std::string &data)
+void LocalUser::AddWriteBuf(const std::string &data)
 {
-       // Don't bother sending text to remote users!
-       if (IS_REMOTE(this))
-               return;
-       if (!quitting && MyClass && getSendQSize() + data.length() > MyClass->GetSendqHardMax() && !HasPrivPermission("users/flood/increased-buffers"))
+       if (!quitting && getSendQSize() + data.length() > MyClass->GetSendqHardMax() && !HasPrivPermission("users/flood/increased-buffers"))
        {
                /*
                 * Quit the user FIRST, because otherwise we could recurse
@@ -567,189 +580,153 @@ void User::OnError(BufferedSocketError)
        ServerInstance->Users->QuitUser(this, getError());
 }
 
-bool User::cull()
+CullResult User::cull()
 {
        if (!quitting)
                ServerInstance->Users->QuitUser(this, "Culled without QuitUser");
        if (uuid.empty())
        {
                ServerInstance->Logs->Log("USERS", DEBUG, "User culled twice? UUID empty");
-               return true;
+               return Extensible::cull();
        }
        PurgeEmptyChannels();
-       if (IS_LOCAL(this))
-       {
-               if (fd != INT_MAX)
-                       Close();
-
-               std::vector<User*>::iterator x = find(ServerInstance->Users->local_users.begin(),ServerInstance->Users->local_users.end(),this);
-               if (x != ServerInstance->Users->local_users.end())
-                       ServerInstance->Users->local_users.erase(x);
-               else
-                       ServerInstance->Logs->Log("USERS", DEBUG, "Failed to remove user from vector");
-       }
-
-       if (this->AllowedOperCommands)
-       {
-               delete AllowedOperCommands;
-               AllowedOperCommands = NULL;
-       }
-
-       if (this->AllowedPrivs)
-       {
-               delete AllowedPrivs;
-               AllowedPrivs = NULL;
-       }
+       if (IS_LOCAL(this) && fd != INT_MAX)
+               Close();
 
        this->InvalidateCache();
        this->DecrementModes();
 
-       if (client_sa.sa.sa_family != AF_UNSPEC)
-               ServerInstance->Users->RemoveCloneCounts(this);
-
        ServerInstance->Users->uuidlist->erase(uuid);
        uuid.clear();
-       return true;
+       return Extensible::cull();
 }
 
-void User::Oper(const std::string &opertype, const std::string &opername)
+CullResult LocalUser::cull()
+{
+       std::vector<LocalUser*>::iterator x = find(ServerInstance->Users->local_users.begin(),ServerInstance->Users->local_users.end(),this);
+       if (x != ServerInstance->Users->local_users.end())
+               ServerInstance->Users->local_users.erase(x);
+       else
+               ServerInstance->Logs->Log("USERS", DEBUG, "Failed to remove user from vector");
+
+       if (client_sa.sa.sa_family != AF_UNSPEC)
+               ServerInstance->Users->RemoveCloneCounts(this);
+       return User::cull();
+}
+
+void User::Oper(OperInfo* info)
 {
        if (this->IsModeSet('o'))
                this->UnOper();
 
        this->modes[UM_OPERATOR] = 1;
+       this->oper = info;
        this->WriteServ("MODE %s :+o", this->nick.c_str());
-       FOREACH_MOD(I_OnOper, OnOper(this, opertype));
+       FOREACH_MOD(I_OnOper, OnOper(this, info->name));
+
+       std::string opername;
+       if (info->oper_block)
+               opername = info->oper_block->getString("name");
 
-       ServerInstance->SNO->WriteToSnoMask('o',"%s (%s@%s) is now an IRC operator of type %s (using oper '%s')", this->nick.c_str(), this->ident.c_str(), this->host.c_str(), irc::Spacify(opertype.c_str()), opername.c_str());
-       this->WriteNumeric(381, "%s :You are now %s %s", this->nick.c_str(), strchr("aeiouAEIOU", *opertype.c_str()) ? "an" : "a", irc::Spacify(opertype.c_str()));
+       ServerInstance->SNO->WriteToSnoMask('o',"%s (%s@%s) is now an IRC operator of type %s (using oper '%s')",
+               nick.c_str(), ident.c_str(), host.c_str(), info->NameStr(), opername.c_str());
+       this->WriteNumeric(381, "%s :You are now %s %s", nick.c_str(), strchr("aeiouAEIOU", info->name[0]) ? "an" : "a", info->NameStr());
 
-       ServerInstance->Logs->Log("OPER", DEFAULT, "%s!%s@%s opered as type: %s", this->nick.c_str(), this->ident.c_str(), this->host.c_str(), opertype.c_str());
-       this->oper.assign(opertype, 0, 512);
+       ServerInstance->Logs->Log("OPER", DEFAULT, "%s!%s@%s opered as type: %s", this->nick.c_str(), this->ident.c_str(), this->host.c_str(), info->NameStr());
        ServerInstance->Users->all_opers.push_back(this);
 
-       /*
-        * This might look like it's in the wrong place.
-        * It is *not*!
-        *
-        * For multi-network servers, we may not have the opertypes of the remote server, but we still want to mark the user as an oper of that type.
-        * -- w00t
-        */
-       opertype_t::iterator iter_opertype = ServerInstance->Config->opertypes.find(this->oper.c_str());
-       if (iter_opertype != ServerInstance->Config->opertypes.end())
-       {
-               if (AllowedOperCommands)
-                       AllowedOperCommands->clear();
-               else
-                       AllowedOperCommands = new std::set<std::string>;
+       // Expand permissions from config for faster lookup
+       if (IS_LOCAL(this))
+               oper->init();
 
-               if (AllowedPrivs)
-                       AllowedPrivs->clear();
-               else
-                       AllowedPrivs = new std::set<std::string>;
+       FOREACH_MOD(I_OnPostOper,OnPostOper(this, info->name, opername));
+}
 
-               AllowedUserModes.reset();
-               AllowedChanModes.reset();
-               this->AllowedUserModes['o' - 'A'] = true; // Call me paranoid if you want.
+void OperInfo::init()
+{
+       AllowedOperCommands.clear();
+       AllowedPrivs.clear();
+       AllowedUserModes.reset();
+       AllowedChanModes.reset();
+       AllowedUserModes['o' - 'A'] = true; // Call me paranoid if you want.
 
-               std::string myclass, mycmd, mypriv;
-               irc::spacesepstream Classes(iter_opertype->second.c_str());
-               while (Classes.GetToken(myclass))
+       for(std::vector<reference<ConfigTag> >::iterator iter = class_blocks.begin(); iter != class_blocks.end(); ++iter)
+       {
+               ConfigTag* tag = *iter;
+               std::string mycmd, mypriv;
+               /* Process commands */
+               irc::spacesepstream CommandList(tag->getString("commands"));
+               while (CommandList.GetToken(mycmd))
                {
-                       operclass_t::iterator iter_operclass = ServerInstance->Config->operclass.find(myclass.c_str());
-                       if (iter_operclass != ServerInstance->Config->operclass.end())
-                       {
-                               /* Process commands */
-                               irc::spacesepstream CommandList(iter_operclass->second.commandlist);
-                               while (CommandList.GetToken(mycmd))
-                               {
-                                       this->AllowedOperCommands->insert(mycmd);
-                               }
+                       AllowedOperCommands.insert(mycmd);
+               }
 
-                               irc::spacesepstream PrivList(iter_operclass->second.privs);
-                               while (PrivList.GetToken(mypriv))
-                               {
-                                       this->AllowedPrivs->insert(mypriv);
-                               }
+               irc::spacesepstream PrivList(tag->getString("privs"));
+               while (PrivList.GetToken(mypriv))
+               {
+                       AllowedPrivs.insert(mypriv);
+               }
 
-                               for (unsigned char* c = (unsigned char*)iter_operclass->second.umodelist.c_str(); *c; ++c)
-                               {
-                                       if (*c == '*')
-                                       {
-                                               this->AllowedUserModes.set();
-                                       }
-                                       else
-                                       {
-                                               this->AllowedUserModes[*c - 'A'] = true;
-                                       }
-                               }
+               for (unsigned char* c = (unsigned char*)tag->getString("usermodes").c_str(); *c; ++c)
+               {
+                       if (*c == '*')
+                       {
+                               this->AllowedUserModes.set();
+                       }
+                       else
+                       {
+                               this->AllowedUserModes[*c - 'A'] = true;
+                       }
+               }
 
-                               for (unsigned char* c = (unsigned char*)iter_operclass->second.cmodelist.c_str(); *c; ++c)
-                               {
-                                       if (*c == '*')
-                                       {
-                                               this->AllowedChanModes.set();
-                                       }
-                                       else
-                                       {
-                                               this->AllowedChanModes[*c - 'A'] = true;
-                                       }
-                               }
+               for (unsigned char* c = (unsigned char*)tag->getString("chanmodes").c_str(); *c; ++c)
+               {
+                       if (*c == '*')
+                       {
+                               this->AllowedChanModes.set();
+                       }
+                       else
+                       {
+                               this->AllowedChanModes[*c - 'A'] = true;
                        }
                }
        }
-
-       FOREACH_MOD(I_OnPostOper,OnPostOper(this, opertype, opername));
 }
 
 void User::UnOper()
 {
-       if (IS_OPER(this))
-       {
-               /*
-                * unset their oper type (what IS_OPER checks).
-                * note, order is important - this must come before modes as -o attempts
-                * to call UnOper. -- w00t
-                */
-               this->oper.clear();
-
+       if (!IS_OPER(this))
+               return;
 
-               /* Remove all oper only modes from the user when the deoper - Bug #466*/
-               std::string moderemove("-");
+       /*
+        * unset their oper type (what IS_OPER checks).
+        * note, order is important - this must come before modes as -o attempts
+        * to call UnOper. -- w00t
+        */
+       oper = NULL;
 
-               for (unsigned char letter = 'A'; letter <= 'z'; letter++)
-               {
-                       ModeHandler* mh = ServerInstance->Modes->FindMode(letter, MODETYPE_USER);
-                       if (mh && mh->NeedsOper())
-                               moderemove += letter;
-               }
 
+       /* Remove all oper only modes from the user when the deoper - Bug #466*/
+       std::string moderemove("-");
 
-               std::vector<std::string> parameters;
-               parameters.push_back(this->nick);
-               parameters.push_back(moderemove);
+       for (unsigned char letter = 'A'; letter <= 'z'; letter++)
+       {
+               ModeHandler* mh = ServerInstance->Modes->FindMode(letter, MODETYPE_USER);
+               if (mh && mh->NeedsOper())
+                       moderemove += letter;
+       }
 
-               ServerInstance->Parser->CallHandler("MODE", parameters, this);
 
-               /* remove the user from the oper list. Will remove multiple entries as a safeguard against bug #404 */
-               ServerInstance->Users->all_opers.remove(this);
+       std::vector<std::string> parameters;
+       parameters.push_back(this->nick);
+       parameters.push_back(moderemove);
 
-               if (AllowedOperCommands)
-               {
-                       delete AllowedOperCommands;
-                       AllowedOperCommands = NULL;
-               }
+       ServerInstance->Parser->CallHandler("MODE", parameters, this);
 
-               if (AllowedPrivs)
-               {
-                       delete AllowedPrivs;
-                       AllowedPrivs = NULL;
-               }
+       /* remove the user from the oper list. Will remove multiple entries as a safeguard against bug #404 */
+       ServerInstance->Users->all_opers.remove(this);
 
-               AllowedUserModes.reset();
-               AllowedChanModes.reset();
-               this->modes[UM_OPERATOR] = 0;
-       }
+       this->modes[UM_OPERATOR] = 0;
 }
 
 /* adds or updates an entry in the whowas list */
@@ -767,11 +744,15 @@ void User::AddToWhoWas()
 /*
  * Check class restrictions
  */
-void User::CheckClass()
+void LocalUser::CheckClass()
 {
        ConnectClass* a = this->MyClass;
 
-       if ((!a) || (a->type == CC_DENY))
+       if (!a)
+       {
+               ServerInstance->Users->QuitUser(this, "Access denied by configuration");
+       }
+       else if (a->type == CC_DENY)
        {
                ServerInstance->Users->QuitUser(this, "Unauthorised connection");
                return;
@@ -813,7 +794,7 @@ bool User::CheckLines(bool doZline)
        return false;
 }
 
-void User::FullConnect()
+void LocalUser::FullConnect()
 {
        ServerInstance->stats->statsConnects++;
        this->idle_lastmsg = ServerInstance->Time();
@@ -829,10 +810,13 @@ void User::FullConnect()
        /* Check the password, if one is required by the user's connect class.
         * This CANNOT be in CheckClass(), because that is called prior to PASS as well!
         */
-       if (this->MyClass && !this->MyClass->GetPass().empty() && !this->haspassed)
+       if (!MyClass->pass.empty())
        {
-               ServerInstance->Users->QuitUser(this, "Invalid password");
-               return;
+               if (ServerInstance->PassCompare(this, MyClass->pass.c_str(), password.c_str(), MyClass->hash.c_str()))
+               {
+                       ServerInstance->Users->QuitUser(this, "Invalid password");
+                       return;
+               }
        }
 
        if (this->CheckLines())
@@ -914,9 +898,9 @@ bool User::ForceNickChange(const char* newnick)
 
        this->InvalidateCache();
 
-       NICKForced.set(this, 1);
+       ServerInstance->NICKForced.set(this, 1);
        FIRST_MOD_RESULT(OnUserPreNick, MOD_RESULT, (this, newnick));
-       NICKForced.set(this, 0);
+       ServerInstance->NICKForced.set(this, 0);
 
        if (MOD_RESULT == MOD_RES_DENY)
        {
@@ -930,9 +914,9 @@ bool User::ForceNickChange(const char* newnick)
        {
                std::vector<std::string> parameters;
                parameters.push_back(newnick);
-               NICKForced.set(this, 1);
+               ServerInstance->NICKForced.set(this, 1);
                bool result = (ServerInstance->Parser->CallHandler("NICK", parameters, this) == CMD_SUCCESS);
-               NICKForced.set(this, 0);
+               ServerInstance->NICKForced.set(this, 0);
                return result;
        }
 
@@ -940,7 +924,7 @@ bool User::ForceNickChange(const char* newnick)
        return false;
 }
 
-int User::GetServerPort()
+int LocalUser::GetServerPort()
 {
        switch (this->server_sa.sa.sa_family)
        {
@@ -1071,6 +1055,14 @@ bool User::SetClientIP(const char* sip)
 static std::string wide_newline("\r\n");
 
 void User::Write(const std::string& text)
+{
+}
+
+void User::Write(const char *text, ...)
+{
+}
+
+void LocalUser::Write(const std::string& text)
 {
        if (!ServerInstance->SE->BoundsCheckFd(this))
                return;
@@ -1095,7 +1087,7 @@ void User::Write(const std::string& text)
 
 /** Write()
  */
-void User::Write(const char *text, ...)
+void LocalUser::Write(const char *text, ...)
 {
        va_list argsPtr;
        char textbuffer[MAXBUF];
@@ -1203,7 +1195,7 @@ void User::WriteCommon(const char* text, ...)
        char textbuffer[MAXBUF];
        va_list argsPtr;
 
-       if (this->registered != REG_ALL || !IS_LOCAL(this) || quitting)
+       if (this->registered != REG_ALL || quitting)
                return;
 
        int len = snprintf(textbuffer,MAXBUF,":%s ",this->GetFullHost().c_str());
@@ -1220,7 +1212,7 @@ void User::WriteCommonExcept(const char* text, ...)
        char textbuffer[MAXBUF];
        va_list argsPtr;
 
-       if (this->registered != REG_ALL || !IS_LOCAL(this) || quitting)
+       if (this->registered != REG_ALL || quitting)
                return;
 
        int len = snprintf(textbuffer,MAXBUF,":%s ",this->GetFullHost().c_str());
@@ -1234,12 +1226,10 @@ void User::WriteCommonExcept(const char* text, ...)
 
 void User::WriteCommonRaw(const std::string &line, bool include_self)
 {
-       if (this->registered != REG_ALL || !IS_LOCAL(this) || quitting)
+       if (this->registered != REG_ALL || quitting)
                return;
 
-       if (!already_sent)
-               InitializeAlreadySent(ServerInstance->SE);
-       uniq_id++;
+       uniq_id_t uniq_id = ++already_sent;
 
        UserChanList include_c(chans);
        std::map<User*,bool> exceptions;
@@ -1282,10 +1272,7 @@ void User::WriteCommonQuit(const std::string &normal_text, const std::string &op
        if (this->registered != REG_ALL)
                return;
 
-       uniq_id++;
-
-       if (!already_sent)
-               InitializeAlreadySent(ServerInstance->SE);
+       uniq_id_t uniq_id = ++already_sent;
 
        snprintf(tb1,MAXBUF,":%s QUIT :%s",this->GetFullHost().c_str(),normal_text.c_str());
        snprintf(tb2,MAXBUF,":%s QUIT :%s",this->GetFullHost().c_str(),oper_text.c_str());
@@ -1322,32 +1309,54 @@ void User::WriteCommonQuit(const std::string &normal_text, const std::string &op
        }
 }
 
-void User::WriteWallOps(const std::string &text)
+void LocalUser::SendText(const std::string& line)
 {
-       std::string wallop("WALLOPS :");
-       wallop.append(text);
+       Write(line);
+}
 
-       for (std::vector<User*>::const_iterator i = ServerInstance->Users->local_users.begin(); i != ServerInstance->Users->local_users.end(); i++)
-       {
-               User* t = *i;
-               if (t->IsModeSet('w'))
-                       this->WriteTo(t,wallop);
-       }
+void RemoteUser::SendText(const std::string& line)
+{
+       ServerInstance->PI->PushToClient(this, line);
 }
 
-void User::WriteWallOps(const char* text, ...)
+void FakeUser::SendText(const std::string& line)
 {
-       if (!IS_LOCAL(this))
-               return;
+}
 
-       char textbuffer[MAXBUF];
+void User::SendText(const char *text, ...)
+{
        va_list argsPtr;
+       char line[MAXBUF];
 
        va_start(argsPtr, text);
-       vsnprintf(textbuffer, MAXBUF, text, argsPtr);
+       vsnprintf(line, MAXBUF, text, argsPtr);
        va_end(argsPtr);
 
-       this->WriteWallOps(std::string(textbuffer));
+       SendText(std::string(line));
+}
+
+void User::SendText(const std::string &LinePrefix, std::stringstream &TextStream)
+{
+       char line[MAXBUF];
+       int start_pos = LinePrefix.length();
+       int pos = start_pos;
+       memcpy(line, LinePrefix.data(), pos);
+       std::string Word;
+       while (TextStream >> Word)
+       {
+               int len = Word.length();
+               if (pos + len + 12 > MAXBUF)
+               {
+                       line[pos] = '\0';
+                       SendText(std::string(line));
+                       pos = start_pos;
+               }
+               line[pos] = ' ';
+               memcpy(line + pos + 1, Word.data(), len);
+               pos += len + 1;
+       }
+       line[pos] = '\0';
+       SendText(std::string(line));
 }
 
 /* return 0 or 1 depending if users u and u2 share one or more common channels
@@ -1387,7 +1396,7 @@ bool User::ChangeName(const char* gecos)
        if (IS_LOCAL(this))
        {
                ModResult MOD_RESULT;
-               FIRST_MOD_RESULT(OnChangeLocalUserGECOS, MOD_RESULT, (this,gecos));
+               FIRST_MOD_RESULT(OnChangeLocalUserGECOS, MOD_RESULT, (IS_LOCAL(this),gecos));
                if (MOD_RESULT == MOD_RES_DENY)
                        return false;
                FOREACH_MOD(I_OnChangeName,OnChangeName(this,gecos));
@@ -1404,10 +1413,8 @@ void User::DoHostCycle(const std::string &quitline)
        if (!ServerInstance->Config->CycleHosts)
                return;
 
-       uniq_id++;
-
-       if (!already_sent)
-               InitializeAlreadySent(ServerInstance->SE);
+       uniq_id_t silent_id = ++already_sent;
+       uniq_id_t seen_id = ++already_sent;
 
        UserChanList include_c(chans);
        std::map<User*,bool> exceptions;
@@ -1419,9 +1426,15 @@ void User::DoHostCycle(const std::string &quitline)
                User* u = i->first;
                if (IS_LOCAL(u) && !u->quitting)
                {
-                       already_sent[u->fd] = uniq_id;
                        if (i->second)
+                       {
+                               already_sent[u->fd] = seen_id;
                                u->Write(quitline);
+                       }
+                       else
+                       {
+                               already_sent[u->fd] = silent_id;
+                       }
                }
        }
        for (UCListIter v = include_c.begin(); v != include_c.end(); ++v)
@@ -1442,11 +1455,13 @@ void User::DoHostCycle(const std::string &quitline)
                        User* u = i->first;
                        if (u == this || !IS_LOCAL(u))
                                continue;
+                       if (already_sent[u->fd] == silent_id)
+                               continue;
 
-                       if (already_sent[i->first->fd] != uniq_id)
+                       if (already_sent[u->fd] != seen_id)
                        {
                                u->Write(quitline);
-                               already_sent[i->first->fd] = uniq_id;
+                               already_sent[i->first->fd] = seen_id;
                        }
                        u->Write(joinline);
                        if (modeline.length() > 0)
@@ -1463,7 +1478,7 @@ bool User::ChangeDisplayedHost(const char* shost)
        if (IS_LOCAL(this))
        {
                ModResult MOD_RESULT;
-               FIRST_MOD_RESULT(OnChangeLocalUserHost, MOD_RESULT, (this,shost));
+               FIRST_MOD_RESULT(OnChangeLocalUserHost, MOD_RESULT, (IS_LOCAL(this),shost));
                if (MOD_RESULT == MOD_RES_DENY)
                        return false;
        }
@@ -1516,7 +1531,7 @@ void User::SendAll(const char* command, const char* text, ...)
        snprintf(formatbuffer,MAXBUF,":%s %s $* :%s", this->GetFullHost().c_str(), command, textbuffer);
        std::string fmt = formatbuffer;
 
-       for (std::vector<User*>::const_iterator i = ServerInstance->Users->local_users.begin(); i != ServerInstance->Users->local_users.end(); i++)
+       for (std::vector<LocalUser*>::const_iterator i = ServerInstance->Users->local_users.begin(); i != ServerInstance->Users->local_users.end(); i++)
        {
                (*i)->Write(fmt);
        }
@@ -1584,13 +1599,10 @@ void User::SplitChanList(User* dest, const std::string &cl)
  * then their ip will be taken as 'priority' anyway, so for example,
  * <connect allow="127.0.0.1"> will match joe!bloggs@localhost
  */
-ConnectClass* User::SetClass(const std::string &explicit_name)
+void LocalUser::SetClass(const std::string &explicit_name)
 {
        ConnectClass *found = NULL;
 
-       if (!IS_LOCAL(this))
-               return NULL;
-
        ServerInstance->Logs->Log("CONNECTCLASS", DEBUG, "Setting connect class for UID %s", this->uuid.c_str());
 
        if (!explicit_name.empty())
@@ -1665,8 +1677,6 @@ ConnectClass* User::SetClass(const std::string &explicit_name)
        {
                MyClass = found;
        }
-
-       return this->MyClass;
 }
 
 /* looks up a users password for their connection class (<ALLOW>/<DENY> tags)
@@ -1674,49 +1684,23 @@ ConnectClass* User::SetClass(const std::string &explicit_name)
  * then their ip will be taken as 'priority' anyway, so for example,
  * <connect allow="127.0.0.1"> will match joe!bloggs@localhost
  */
+ConnectClass* LocalUser::GetClass()
+{
+       return MyClass;
+}
+
 ConnectClass* User::GetClass()
 {
-       return this->MyClass;
+       return NULL;
 }
 
 void User::PurgeEmptyChannels()
 {
-       std::vector<Channel*> to_delete;
-
        // firstly decrement the count on each channel
        for (UCListIter f = this->chans.begin(); f != this->chans.end(); f++)
        {
                Channel* c = *f;
-               c->RemoveAllPrefixes(this);
-               if (c->DelUser(this) == 0)
-               {
-                       /* No users left in here, mark it for deletion */
-                       try
-                       {
-                               to_delete.push_back(c);
-                       }
-                       catch (...)
-                       {
-                               ServerInstance->Logs->Log("USERS", DEBUG,"Exception in User::PurgeEmptyChannels to_delete.push_back()");
-                       }
-               }
-       }
-
-       for (std::vector<Channel*>::iterator n = to_delete.begin(); n != to_delete.end(); n++)
-       {
-               Channel* thischan = *n;
-               chan_hash::iterator i2 = ServerInstance->chanlist->find(thischan->name);
-               if (i2 != ServerInstance->chanlist->end())
-               {
-                       ModResult MOD_RESULT;
-                       FIRST_MOD_RESULT(OnChannelPreDelete, MOD_RESULT, (i2->second));
-                       if (MOD_RESULT == MOD_RES_DENY)
-                               continue; // delete halted by module
-                       FOREACH_MOD(I_OnChannelDelete,OnChannelDelete(i2->second));
-                       delete i2->second;
-                       ServerInstance->chanlist->erase(i2);
-                       this->chans.erase(*n);
-               }
+               c->DelUser(this);
        }
 
        this->UnOper();
@@ -1753,16 +1737,6 @@ void User::ShowRULES()
        this->WriteNumeric(RPL_RULESEND, "%s :End of RULES command.",this->nick.c_str());
 }
 
-void User::IncreasePenalty(int increase)
-{
-       this->Penalty += increase;
-}
-
-void User::DecreasePenalty(int decrease)
-{
-       this->Penalty -= decrease;
-}
-
 void FakeUser::SetFakeServer(std::string name)
 {
        this->nick = name;
@@ -1783,19 +1757,19 @@ const std::string FakeUser::GetFullRealHost()
        return nick;
 }
 
-ConnectClass::ConnectClass(char t, const std::string& mask)
-       : type(t), name("unnamed"), registration_timeout(0), host(mask),
+ConnectClass::ConnectClass(ConfigTag* tag, char t, const std::string& mask)
+       : config(tag), type(t), name("unnamed"), registration_timeout(0), host(mask),
        pingtime(0), pass(""), hash(""), softsendqmax(0), hardsendqmax(0),
-       recvqmax(0), maxlocal(0), maxglobal(0), maxchans(0), port(0), limit(0)
+       recvqmax(0), penaltythreshold(0), maxlocal(0), maxglobal(0), maxchans(0), port(0), limit(0)
 {
 }
 
-ConnectClass::ConnectClass(char t, const std::string& mask, const ConnectClass& parent)
-       : type(t), name("unnamed"),
+ConnectClass::ConnectClass(ConfigTag* tag, char t, const std::string& mask, const ConnectClass& parent)
+       : config(tag), type(t), name("unnamed"),
        registration_timeout(parent.registration_timeout), host(mask),
        pingtime(parent.pingtime), pass(parent.pass), hash(parent.hash),
        softsendqmax(parent.softsendqmax), hardsendqmax(parent.hardsendqmax),
-       recvqmax(parent.recvqmax), maxlocal(parent.maxlocal),
+       recvqmax(parent.recvqmax), penaltythreshold(parent.penaltythreshold), maxlocal(parent.maxlocal),
        maxglobal(parent.maxglobal), maxchans(parent.maxchans),
        port(parent.port), limit(parent.limit)
 {
@@ -1812,6 +1786,7 @@ void ConnectClass::Update(const ConnectClass* src)
        softsendqmax = src->softsendqmax;
        hardsendqmax = src->hardsendqmax;
        recvqmax = src->recvqmax;
+       penaltythreshold = src->penaltythreshold;
        maxlocal = src->maxlocal;
        maxglobal = src->maxglobal;
        limit = src->limit;