totallymike / ircnode

Extensible IRC bot written with node.js
https://github.com/totallymike/ircnode/wiki
MIT License
4 stars 2 forks source link

An !exec command #27

Closed sigv closed 12 years ago

sigv commented 12 years ago

The command is made for bot administration. The command is very basic. It executes the text given to it as native JS code. This plugin is marked as only usable by owners because of the powers it gives and possibly should not be included in the main installation.

sigv commented 12 years ago

Could we possibly make restrictions for it. They could reside in the main configuration file, with name exec_restrict or similar. By default, these could include fs, irc.users and irc.config so that there is no access to the real file system and the configuration files which may contain sensitive data. What do you think?

We could also make a new auth group that would be above owner which would allow the user to execute code. This would require deeper integration of #19.