[IRCServices] Re: Andrew, Re: Chris... Re: Feature Request

youph at earthlink.net youph at earthlink.net
Thu Jan 13 00:18:50 PST 2005


Andrew,

I of course respect your ambivalence but I don’t quite understand it.

The reason I am requesting this feature is because I feel services is 
incomplete as is. The root user of services should, in theory (or at 
least in my perception of what a root user means) be able to read/write 
all db values inside the services database. This would include reading 
and writing hashed passwords (which, obviously, poses no security threat 
what so ever.)

I would like to further this (friendly) discussion with anyone apposed 
to my views.

Of course I can write my own module, but I’d rather see it implemented 
‘officially’ as I see it as a missing part of the IRC services package, 
which, brown nosing aside, is a masterpirce Andrew, cheers to you!

Chris,
RE:
“Kind of off-topic here and out of curiousity, how do you aim to handle a
situation where someone registers an account on your website which isn't
usable as an IRC nick (for example "Hello Bob")? I've been considering a
problem like this for some time and I'd like to see how someone else is
aiming to do it.”

Well it hasn’t been implemented yet (obviously) but this is the general 
theory:

Pass User Name and Password values from the web forum used for 
registration as parameters to an external CGI script/program that would 
either:
a) connect to IRC
b) always be connected to IRC and merely take the parameters in some 
type of Inter Process Communication method such as a socket or via 
signals/files or memory mapping… it wouldn’t matter really

First off, the bot would have services admin privileges.

The bot would first check to make sure the User Name was valid for IRC 
and make changes as necessary (this would be non-trivial I assume) and 
then /nick to the User Name. Next the bot would /ns register <dummy 
password> and immediately /ns set MD5password <Password> with the known 
MD5 hash of the user’s forum account.

Its only possible if, of course, the ability to set a password with the 
MD5 hash was implemented.

--Matt