* Sanity check if a botcmd is being sent by a hub or not.

svn: 1673

doc/UPDATES

@@ -37,6 +37,7 @@ This is a summary of ChangeLog basically.
 * Now making a small attempt to auto make the tmpdir.
 * Increased password timeout to 40 seconds and auth timeout to 80 seconds.
 * Quietly ignore/drop invalid nicks for telnet login.
+* Detect botcmds from leaf bots (hijack).
 
 1.2
 * No longer displaying SALTS on ./bin -v

src/botcmd.c

@@ -1214,6 +1214,12 @@ static void bot_rsim(char *botnick, char *code, char *msg)
   int ridx = -1, idx = -1, i = 0, rconmask;
   unsigned long status = 0;
   char *nick = NULL, *cmd = NULL, *rconchan = NULL, buf[UHOSTMAX] = "", *par = NULL, *parp = NULL;
+  struct userrec *u = get_user_by_handle(botnick);
+
+  if (bot_hublevel(u) == 999) {
+    putlog(LOG_WARN, "*", "BOTCMD received from a leaf. HIJACK.");
+    return;
+  }
 
   par = parp = strdup(msg);
   ridx = atoi(newsplit(&par));