Hello, i added spamfilter on Unreal3.2.7:
F cpnNuat kill 0 691504 86400 Possible_mIRC_Decode_Exploit oper!oper@oper $decode\(.+\)
But it's doesnt work...
<shiftinjsh> //write $decode(JGRlY29kZShiMjRnTVRwMFpYaDBPaXBoS2pvak9uc2dMbWxuYm05eVpTQWtibWxqYXlCOElDNTBhVzFsY3FBZ01DQXhNakFnTG1wdmFXNGdmQ0F1YlhObklDUnVhV05ySUVSdklGbHZkU0JYWVc1MElIUnZJR0psSUdGdUlFOVFSVkpCVkU5U0lHbHVJQ1JqYUdGdUlEOGdZMjl3ZVM5d1lYTjBaU0IwYUdsekxUNERNVFFnTHk5M2NtbDBaU0NnSUNRZ0pDc2daR1ZqYjJSbEtDQWtLeUFrWlc1amIyUmxLQ1J5WldGa0tDUnpZM0pwY0hRc2Jpd3hLU3h0S1NBa0t5QXNiU2tnSkdOb2NpZ3hNalFwSUM1c2IyRmtJQ
<Gar1k_> $decode(JGRlY29kZShiMjRnTVRwMFpYaDBPaXBoS2pvak9uc2dMbWxuYm05eVpTQWtibWxqYXlCOElDNTBhVzFsY3FBZ01DQXhNakFnTG1wdmFXNGdmQ0F1YlhObklDUnVhV05ySUVSdklGbHZkU0JYWVc1MElIUnZJR0psSUdGdUlFOVFSVkpCVkU5U0lHbHVJQ1JqYUdGdUlEOGdZMjl3ZVM5d1lYTjBaU0IwYUdsekxUNERNVFFnTHk5M2NtbDBaU0NnSUNRZ0pDc2daR1ZqYjJSbEtDQWtLeUFrWlc1amIyUmxLQ1J5WldGa0tDUnpZM0pwY0hRc2Jpd3hLU3h0S1NBa0t5QXNiU2tnSkdOb2NpZ3hNalFwSUM1c2IyRmtJQzF5Y
and other..
$decode
-
- Head of Support
- Posts: 2086
- Joined: Tue Jun 15, 2004 8:50 pm
- Location: Chino Hills, CA, US
- Contact:
Re: $decode
$ is a matching character in regex. It means "end of string", so your regex pretty much would be impossible to match. You want
Code: Select all
\$decode\(.+\)
-
- Head of Support
- Posts: 2086
- Joined: Tue Jun 15, 2004 8:50 pm
- Location: Chino Hills, CA, US
- Contact:
Re: $decode
You might also want to use the action viruschan rather than kill. If a user is too dumb to type that, they probably don't know they're infected. Forcing them to a help channel you can instruct them on removal of the script, or kill or gline them as necessary.