[Dchub-dev] [bug #4262] invalid usernames

[nobody]

=================== BUG #4262: LATEST MODIFICATIONS ==================
http://savannah.nongnu.org/bugs/?func=detailbug&bug_id=4262&group_id=3963

Changes by: Yves BLUSSEAU <address@hidden>
Date: mar 14.10.2003 à 10:09 (Europe/Paris)

            What     | Removed                   | Added
---------------------------------------------------------------------------
          Resolution | None                      | Fixed
              Status | Open                      | Approved
       Fixed Release |                           | 0.5.0




=================== BUG #4262: FULL BUG SNAPSHOT ===================


Signalé par: hhgoth                   Projet: DcHub:  Hub software for Direct 
Connect
Signalé le: jeu 10.07.2003 à 11:55
Category:  None                       Severity:  5 - Major                  
Bug Group:  None                      Resolution:  Fixed                    
Assigned to:  ericprev                Status:  Approved                     
Release:  0.4.5_CVS                   Platform Version:  Linux x86          
Planned Release:  None                Fixed Release:  0.5.0                 

Summary:  invalid usernames

Original Submission:  I don't know how it's possible. Somehow users with an 
space in the nickname are able to enter the hub.
As well they don't send an MyINFO but the connection is not closed...
I've already tried to modify the 'validate nick' stage of main_cnx_handshake.c 
but without success...
the invalid clients seem to be modified edonkey-clones able to use the dchub 
protocol.

Follow-up Comments
*******************

-------------------------------------------------------
Date: mer 06.08.2003 à 10:04        By: ericprev
Technically, it is not possible to log in with a space in the name 
(main_cnx_handshake.c, line 584). It is probably only a character displayed as 
a space but not a real space.



Currently, only 4 characters are forbidden: the space, the dollar, the pound 
(used in regexp) and the pipe. If the client cannot save the share list, it is 
a client problem. DCTC has fixed it for the only unusable character in un*x 
path, the slash.

-------------------------------------------------------
Date: jeu 31.07.2003 à 15:33        By: None
a couple of charachters that should be disallowed in the username are "  / : * 
< >

This will cause problems when people are trying to fetch filelists from them 
becase that the clients cannot create a file (in windowze atleast) that has any 
of those charachters.






La liste CC est vide


Il n'y a aucun fichier attaché actuellement


For detailed info, follow this link:
http://savannah.nongnu.org/bugs/?func=detailbug&bug_id=4262&group_id=3963

_______________________________________________
  Message sent via/by Savannah
  http://savannah.nongnu.org/