hello..
can someone please describe about this matter. Is it can give harm to server or not when regular user can look up all the modules that been load in IRCD with command just simple command /module. All module can be seen without
login as an oper.
regular user can check module wihtout be an oper
-
- Posts: 44
- Joined: Wed Mar 10, 2004 5:30 am
- Location: irc.majestic-liaisons.com
- Contact:
thats how the command works by design, EVERYONE can use it to see what modules have been loaded.
Majestic Liaisons Adult Chat - [url=irc://irc.majestic-liaisons.com:6667]IRC[/url] , Java
It's also good so that users can know what extensions your ircd supports (for example, if I wanted to be able to just set the PrivDeaf (+D) mode, I'd need to first check if the privdeaf module is loaded, and if not, resort to /silence * ). Some might say it's better to publicize this information somewhere like the MOTD (yeah right) or a public website (perhaps an httpd just running on the same machine?), but /module works just fine .
By the way, the extra info (like the author and module version) is only visible to ircops. Normal users see only the name and description.
By the way, the extra info (like the author and module version) is only visible to ircops. Normal users see only the name and description.