Forums Scripts & Popups my bot

can you help me with my bot, im trying to figure out how to do the most secure way, of letting me use '/run' from distant computers, and also im trying to figure out how i can get my bot to let me run any command in mirc if i say it... im trying to set all this up in a PM

1. make a text file with a list of programs they are allowed to run, eg:

winamp.exe
mirc.exe
*.txt

Then use:

• 
  on *:text:!run *:#:{
  if ($read(programs.txt,w,$2-)) { run $2- }
  }

2.

• 
  on *:text:$($+(!,$me) *):#:{
  if ($address($nick,5) == your full address) { $2- }
  }

Syntax is: !botnickname <command>

whats the syntax of the address for code 2?

it's a mask : nick!user@host

But it won't work if you have a dynamic IP or if you change your nickname.

create an on text, on notice, or ctcp event
which takes a password as first parameter and the stuff to run as the rest...

so: /ctcp YourBot RUN MyPAssw0rd winamp.exe

ctcp *:RUN:?: {
if ($2 == MyPAssw0rd) run $3-
}

Mask 2 = *!*@your.host.net

Best (as Doqnach suggested) to set a passwd for yourself (store only the $md5 value of it), when you CTCP|NOTICE|CHAT the bot you send the passwd first, it checks it and only then allows you to do stuff.

If you want it secure from people that have access to your bot('s computer): store only the $md5 of your password as Iori said.

If you want to protect against people sniffing your connection: store your password normally on your bot, and when you want to login, first let your bot send a large random number and your $address, then send as password $md5($+(given address,given random number,password)). Also, allow only 1 login try per random number, limit the sending of random numbers per host (maybe reset it after successful login) and set a limited time for logging in. (1 or 2 minutes?)

Protecting against people that can read your bot's files AND sniff your connection: I don't think it's possible

Oh yeah, if you're on someone elses comp: don't use // to have it parse the $md5, use <tab> to parse it immediately and to keep your password out of the editbox buffer (The same line cannot be used later, because you've already used that random number, and the chance of getting it again should be negligable)