diff --git a/NEWS b/NEWS index 9a035b4..72a4e0b 100644 --- a/NEWS +++ b/NEWS @@ -20,6 +20,8 @@ In this alpha8 release, we have added: Bug fixes: * Fixed an issue in auto --help that incorrectly displayed the binary name. +* Fixed an exploit in QDB that allowed users to use services fantasy commands + with the bot's account. Incompatibilities: diff --git a/doc/CHANGELOG b/doc/CHANGELOG index 836a9dd..c0d2a96 100644 --- a/doc/CHANGELOG +++ b/doc/CHANGELOG @@ -3,6 +3,8 @@ Auto IRC Bot 3.0: Change Log 3.0 Indev =============================================================================== + * Fixed an exploit in QDB that allowed users to use services fantasy + commands with the bot's account. * Heavily improved ./install. 3.0 Alpha 7 diff --git a/modules/QDB.pm b/modules/QDB.pm index b0890f1..72705f0 100644 --- a/modules/QDB.pm +++ b/modules/QDB.pm @@ -86,7 +86,7 @@ sub cmd_qdb # Send it back. privmsg($src->{svr}, $src->{chan}, "\002Submitted by\002 $data[1] \002on\002 ".POSIX::strftime('%F', localtime($data[2]))." \002at\002 ".POSIX::strftime('%I:%M %p', localtime($data[2]))); - privmsg($src->{svr}, $src->{chan}, $data[3]); + privmsg($src->{svr}, $src->{chan}, '> '.$data[3]); } when ('COUNT') { # Get count. @@ -211,7 +211,7 @@ sub cmd_qdb } -API::Std::mod_init('QDB', 'Xelhua', '1.02', '3.0.0a7', __PACKAGE__); +API::Std::mod_init('QDB', 'Xelhua', '1.03', '3.0.0a7', __PACKAGE__); # build: perl=5.010000 __END__ @@ -222,7 +222,7 @@ QDB - Quote database module. =head1 VERSION - 1.02 + 1.03 =head1 SYNOPSIS