[Dchub-dev] [bug #4262] invalid usernames

[nobody]

=================== BUG #4262: LATEST MODIFICATIONS ==================
http://savannah.nongnu.org/bugs/?func=detailbug&bug_id=4262&group_id=3963

Changes by: Eric PREVOTEAU <address@hidden>
Date: Wed 08/06/2003 at 10:04 (Europe/Paris)

            What     | Removed                   | Added
---------------------------------------------------------------------------
         Assigned to | None                      | ericprev


------------------ Additional Follow-up Comments ----------------------------
Technically, it is not possible to log in with a space in the name 
(main_cnx_handshake.c, line 584). It is probably only a character displayed as 
a space but not a real space.

Currently, only 4 characters are forbidden: the space, the dollar, the pound 
(used in regexp) and the pipe. If the client cannot save the share list, it is 
a client problem. DCTC has fixed it for the only unusable character in un*x 
path, the slash.



=================== BUG #4262: FULL BUG SNAPSHOT ===================


Submitted by: hhgoth                  Project: DcHub:  Hub software for Direct 
Connect
Submitted on: Thu 07/10/2003 at 11:55
Category:  None                       Severity:  5 - Major                  
Bug Group:  None                      Resolution:  None                     
Assigned to:  ericprev                Status:  Open                         
Release:  0.4.5_CVS                   Platform Version:  Linux x86          
Planned Release:  None                Fixed Release:                        

Summary:  invalid usernames

Original Submission:  I don't know how it's possible. Somehow users with an 
space in the nickname are able to enter the hub.
As well they don't send an MyINFO but the connection is not closed...
I've already tried to modify the 'validate nick' stage of main_cnx_handshake.c 
but without success...
the invalid clients seem to be modified edonkey-clones able to use the dchub 
protocol.

Follow-up Comments
*******************

-------------------------------------------------------
Date: Wed 08/06/2003 at 10:04       By: ericprev
Technically, it is not possible to log in with a space in the name 
(main_cnx_handshake.c, line 584). It is probably only a character displayed as 
a space but not a real space.

Currently, only 4 characters are forbidden: the space, the dollar, the pound 
(used in regexp) and the pipe. If the client cannot save the share list, it is 
a client problem. DCTC has fixed it for the only unusable character in un*x 
path, the slash.

-------------------------------------------------------
Date: Thu 07/31/2003 at 15:33       By: None
a couple of charachters that should be disallowed in the username are "  / : * 
< >
This will cause problems when people are trying to fetch filelists from them 
becase that the clients cannot create a file (in windowze atleast) that has any 
of those charachters.




CC list is empty


No files currently attached


For detailed info, follow this link:
http://savannah.nongnu.org/bugs/?func=detailbug&bug_id=4262&group_id=3963

_______________________________________________
  Message sent via/by Savannah
  http://savannah.nongnu.org/