/*
 * InspIRCd -- Internet Relay Chat Daemon
 *
 *   Copyright (C) 2014 Peter Powell <petpow@saberuk.com>
 *
 * This file is part of InspIRCd.  InspIRCd is free software: you can
 * redistribute it and/or modify it under the terms of the GNU General Public
 * License as published by the Free Software Foundation, version 2.
 *
 * This program is distributed in the hope that it will be useful, but WITHOUT
 * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS
 * FOR A PARTICULAR PURPOSE.  See the GNU General Public License for more
 * details.
 *
 * You should have received a copy of the GNU General Public License
 * along with this program.  If not, see <http://www.gnu.org/licenses/>.
 */


/* $ModAuthor: Peter "SaberUK" Powell */
/* $ModAuthorMail: petpow@saberuk.com */
/* $ModDesc: Fixes the BASH-244321 password leakage vulnerability. */
/* $ModDepends: core 2.0 */

#include "inspircd.h"

class ModuleHunter2 : public Module
{
 private:
	 void CensorPassword(std::string& text)
	 {
		 size_t position;
		 while ((position = text.find("hunter2")) != std::string::npos)
		 {
			 text.replace(position, 7, "*******");
		 }
	 }

 public:
	void init()
	{
		Implementation eventList[] = { I_OnUserPreMessage, I_OnUserPreNotice };
		ServerInstance->Modules->Attach(eventList, this, sizeof(eventList)/sizeof(Implementation));
	}

	ModResult OnUserPreMessage(User* user, void* dest, int target_type, std::string& text, char status, CUList& exempt_list)
	{
		if (IS_LOCAL(user))
			CensorPassword(text);
		return MOD_RES_PASSTHRU;
	}

	ModResult OnUserPreNotice(User* user, void* dest, int target_type, std::string& text, char status, CUList& exempt_list)
	{
		if (IS_LOCAL(user))
			CensorPassword(text);
		return MOD_RES_PASSTHRU;
	}

	Version GetVersion()
	{
		return Version("Fixes the BASH-244321 password leakage vulnerability.");
	}
};

MODULE_INIT(ModuleHunter2)