mIRC Home    About    Download    Register    News    Help

Print Thread
Joined: Feb 2003
Posts: 9
S
Spion Offline OP
Nutrimatic drinks dispenser
OP Offline
Nutrimatic drinks dispenser
S
Joined: Feb 2003
Posts: 9
Reason1 : To prevent numerious worms
Reason2 : Who needs /write and $decode in the editbox?


[email]Spion@Undernet[/email], @#mirc
Joined: Jan 2003
Posts: 2,523
Q
Hoopy frood
Offline
Hoopy frood
Q
Joined: Jan 2003
Posts: 2,523
If this were to be implemented, I'd like it to be optional, turned on by default perhaps, like a checkbox "Disable $decode and /write in editbox" in the 'Lock' section.


/.timerQ 1 0 echo /.timerQ 1 0 $timer(Q).com
Joined: Feb 2003
Posts: 9
S
Spion Offline OP
Nutrimatic drinks dispenser
OP Offline
Nutrimatic drinks dispenser
S
Joined: Feb 2003
Posts: 9
I was just thinking of adding that one too smile


[email]Spion@Undernet[/email], @#mirc
Joined: Nov 2003
Posts: 2,327
T
Hoopy frood
Offline
Hoopy frood
T
Joined: Nov 2003
Posts: 2,327
I agree that $decode isn't really needed but I use /write in the editbox to load script files:

Code:
//.write -c mynewcoolscript.mrc | .load -rs mynewcoolscript.mrc


So I agree with qwerty, adding it as an option would be good.


New username: hixxy
Joined: Jun 2003
Posts: 5,024
M
Hoopy frood
Offline
Hoopy frood
M
Joined: Jun 2003
Posts: 5,024
* Mentality agrees (with everyone!)

Regards,


Mentality/Chris
Joined: Dec 2002
Posts: 2,962
S
Hoopy frood
Offline
Hoopy frood
S
Joined: Dec 2002
Posts: 2,962
If you disable /write then you must also disable /bwrite, /fwrite, and /writeini otherwise it's pointless. The same goes for $decompress() if you disable $decode(). Quite frankly, even then it's a trivial matter for anyone with a malicious nature and 5 minutes on their hands to create some obfuscation based on text identifiers. You'd also have to limit /alias from the command-line, otherwise it'd simply be a case of assigning the malicious code to an alias and then calling that instead. Bottom-line, there's no way to prevent ignorant people executing 'bad' code via the command-line without crippling the scripting language from there. Personally I think there should just be a 'disable command-line scripting' option and let that be the end of it.

Oh, and while we're on the subject, I'd really like %var = value assignment syntax to be available from the command-line again.


Spelling mistakes, grammatical errors, and stupid comments are intentional.
Joined: Feb 2005
Posts: 10
R
Pikka bird
Offline
Pikka bird
R
Joined: Feb 2005
Posts: 10
Cant this problem be coded in via MIRC?

Code:
  
on 1:INPUT:*:{
  if ($decode iswm $1-) {
    echo ERROR BAD COMMAND! 
    HALT
  }
  if (/write = $1) {
    echo ERROR BAD COMMAND! 
    HALT
  }

}



Joined: Nov 2003
Posts: 2,327
T
Hoopy frood
Offline
Hoopy frood
T
Joined: Nov 2003
Posts: 2,327
Or a checklistbox with a list of every command/identifier in mIRC with a select and unselect all button so you can choose exactly what and what not to lock.


New username: hixxy
Joined: Aug 2003
Posts: 1,831
I
Hoopy frood
Offline
Hoopy frood
I
Joined: Aug 2003
Posts: 1,831
Yikes! :tongue:

Joined: Feb 2003
Posts: 9
S
Spion Offline OP
Nutrimatic drinks dispenser
OP Offline
Nutrimatic drinks dispenser
S
Joined: Feb 2003
Posts: 9
That is ok, but I think that just text-manipulation identifiers like $decode should be removed. Still, we all agree it has to be optional.


[email]Spion@Undernet[/email], @#mirc
Joined: Feb 2004
Posts: 201
J
Jae Offline
Fjord artisan
Offline
Fjord artisan
J
Joined: Feb 2004
Posts: 201
Well if you want to remove use of them via the command line.. you also have to remove /alias .... otherwise creating an alias could just use it again.. unless you want to just stop it as it goes through the call stack and stop if it encounters something not to run. I spose it'd have to be almost all or nothing to be of much benifit.

Cheers.


Link Copied to Clipboard