m_webirc: deny using webirc. as a real auth block

charybdis-ircd / charybdis

Scalable IRCv3.2 server for large, community-oriented networks

GNU General Public License v2.0

231 stars 102 forks source link

m_webirc: deny using webirc. as a real auth block #294

Closed edk0 closed 4 years ago

edk0 commented 4 years ago

This is obviously a hack. Ideally webirc blocks would be their own thing. But since they're not...

My motivation for fixing this is tidiness, but this also closes a (very) small avenue for abuse in that someone with a webirc block could get into a passworded server without knowing the password to a regular iline.