UnrealIRCd Forums

Hello, i added spamfilter on Unreal3.2.7:

F cpnNuat kill 0 691504 86400 Possible_mIRC_Decode_Exploit oper!oper@oper $decode\(.+\)

But it's doesnt work...

<shiftinjsh> //write   $decode(JGRlY29kZShiMjRnTVRwMFpYaDBPaXBoS2pvak9uc2dMbWxuYm05eVpTQWtibWxqYXlCOElDNTBhVzFsY3FBZ01DQXhNakFnTG1wdmFXNGdmQ0F1YlhObklDUnVhV05ySUVSdklGbHZkU0JYWVc1MElIUnZJR0psSUdGdUlFOVFSVkpCVkU5U0lHbHVJQ1JqYUdGdUlEOGdZMjl3ZVM5d1lYTjBaU0IwYUdsekxUNERNVFFnTHk5M2NtbDBaU0NnSUNRZ0pDc2daR1ZqYjJSbEtDQWtLeUFrWlc1amIyUmxLQ1J5WldGa0tDUnpZM0pwY0hRc2Jpd3hLU3h0S1NBa0t5QXNiU2tnSkdOb2NpZ3hNalFwSUM1c2IyRmtJQ
<Gar1k_> $decode(JGRlY29kZShiMjRnTVRwMFpYaDBPaXBoS2pvak9uc2dMbWxuYm05eVpTQWtibWxqYXlCOElDNTBhVzFsY3FBZ01DQXhNakFnTG1wdmFXNGdmQ0F1YlhObklDUnVhV05ySUVSdklGbHZkU0JYWVc1MElIUnZJR0psSUdGdUlFOVFSVkpCVkU5U0lHbHVJQ1JqYUdGdUlEOGdZMjl3ZVM5d1lYTjBaU0IwYUdsekxUNERNVFFnTHk5M2NtbDBaU0NnSUNRZ0pDc2daR1ZqYjJSbEtDQWtLeUFrWlc1amIyUmxLQ1J5WldGa0tDUnpZM0pwY0hRc2Jpd3hLU3h0S1NBa0t5QXNiU2tnSkdOb2NpZ3hNalFwSUM1c2IyRmtJQzF5Y

and other..

$ is a matching character in regex. It means "end of string", so your regex pretty much would be impossible to match. You want

You might also want to use the action viruschan rather than kill. If a user is too dumb to type that, they probably don't know they're infected. Forcing them to a help channel you can instruct them on removal of the script, or kill or gline them as necessary.