mIRC Home    About    Download    Register    News    Help

Print Thread
Disabling /write and/or $decode in the editbox #113421 04/03/05 08:33 PM
Joined: Feb 2003
Posts: 9
S
Spion Offline OP
Nutrimatic drinks dispenser
OP Offline
Nutrimatic drinks dispenser
S
Joined: Feb 2003
Posts: 9
Reason1 : To prevent numerious worms
Reason2 : Who needs /write and $decode in the editbox?


[email]Spion@Undernet[/email], @#mirc
Re: Disabling /write and/or $decode in the editbox #113422 04/03/05 08:48 PM
Joined: Jan 2003
Posts: 2,523
Q
qwerty Offline
Hoopy frood
Offline
Hoopy frood
Q
Joined: Jan 2003
Posts: 2,523
If this were to be implemented, I'd like it to be optional, turned on by default perhaps, like a checkbox "Disable $decode and /write in editbox" in the 'Lock' section.


/.timerQ 1 0 echo /.timerQ 1 0 $timer(Q).com
Re: Disabling /write and/or $decode in the editbox #113423 04/03/05 08:50 PM
Joined: Feb 2003
Posts: 9
S
Spion Offline OP
Nutrimatic drinks dispenser
OP Offline
Nutrimatic drinks dispenser
S
Joined: Feb 2003
Posts: 9
I was just thinking of adding that one too smile


[email]Spion@Undernet[/email], @#mirc
Re: Disabling /write and/or $decode in the editbox #113424 04/03/05 08:55 PM
Joined: Nov 2003
Posts: 2,327
T
tidy_trax Offline
Hoopy frood
Offline
Hoopy frood
T
Joined: Nov 2003
Posts: 2,327
I agree that $decode isn't really needed but I use /write in the editbox to load script files:

Code:
//.write -c mynewcoolscript.mrc | .load -rs mynewcoolscript.mrc


So I agree with qwerty, adding it as an option would be good.


New username: hixxy
Re: Disabling /write and/or $decode in the editbox #113425 04/03/05 10:50 PM
Joined: Jun 2003
Posts: 5,024
M
Mentality Offline
Hoopy frood
Offline
Hoopy frood
M
Joined: Jun 2003
Posts: 5,024
* Mentality agrees (with everyone!)

Regards,


Mentality/Chris
Re: Disabling /write and/or $decode in the editbox #113426 04/03/05 11:42 PM
Joined: Dec 2002
Posts: 2,962
S
starbucks_mafia Offline
Hoopy frood
Offline
Hoopy frood
S
Joined: Dec 2002
Posts: 2,962
If you disable /write then you must also disable /bwrite, /fwrite, and /writeini otherwise it's pointless. The same goes for $decompress() if you disable $decode(). Quite frankly, even then it's a trivial matter for anyone with a malicious nature and 5 minutes on their hands to create some obfuscation based on text identifiers. You'd also have to limit /alias from the command-line, otherwise it'd simply be a case of assigning the malicious code to an alias and then calling that instead. Bottom-line, there's no way to prevent ignorant people executing 'bad' code via the command-line without crippling the scripting language from there. Personally I think there should just be a 'disable command-line scripting' option and let that be the end of it.

Oh, and while we're on the subject, I'd really like %var = value assignment syntax to be available from the command-line again.


Spelling mistakes, grammatical errors, and stupid comments are intentional.
Re: Disabling /write and/or $decode in the editbox #113427 05/03/05 12:16 AM
Joined: Feb 2005
Posts: 10
R
Roanoke Offline
Pikka bird
Offline
Pikka bird
R
Joined: Feb 2005
Posts: 10
Cant this problem be coded in via MIRC?

Code:
  
on 1:INPUT:*:{
  if ($decode iswm $1-) {
    echo ERROR BAD COMMAND! 
    HALT
  }
  if (/write = $1) {
    echo ERROR BAD COMMAND! 
    HALT
  }

}



Re: Disabling /write and/or $decode in the editbox #113428 05/03/05 12:45 AM
Joined: Nov 2003
Posts: 2,327
T
tidy_trax Offline
Hoopy frood
Offline
Hoopy frood
T
Joined: Nov 2003
Posts: 2,327
Or a checklistbox with a list of every command/identifier in mIRC with a select and unselect all button so you can choose exactly what and what not to lock.


New username: hixxy
Re: Disabling /write and/or $decode in the editbox #113429 05/03/05 12:58 AM
Joined: Aug 2003
Posts: 1,831
I
Iori Offline
Hoopy frood
Offline
Hoopy frood
I
Joined: Aug 2003
Posts: 1,831
Yikes! :tongue:

Re: Disabling /write and/or $decode in the editbox #113430 05/03/05 06:35 PM
Joined: Feb 2003
Posts: 9
S
Spion Offline OP
Nutrimatic drinks dispenser
OP Offline
Nutrimatic drinks dispenser
S
Joined: Feb 2003
Posts: 9
That is ok, but I think that just text-manipulation identifiers like $decode should be removed. Still, we all agree it has to be optional.


[email]Spion@Undernet[/email], @#mirc
Re: Disabling /write and/or $decode in the editbox #113431 07/03/05 06:02 PM
Joined: Feb 2004
Posts: 201
J
Jae Offline
Fjord artisan
Offline
Fjord artisan
J
Joined: Feb 2004
Posts: 201
Well if you want to remove use of them via the command line.. you also have to remove /alias .... otherwise creating an alias could just use it again.. unless you want to just stop it as it goes through the call stack and stop if it encounters something not to run. I spose it'd have to be almost all or nothing to be of much benifit.

Cheers.