From beac29b1d00235065090aa03b177e8671100bbc2 Mon Sep 17 00:00:00 2001 From: Adam Date: Sun, 22 Jan 2017 16:00:06 -0500 Subject: m_sasl: don't allow logging into unconfirmed accounts --- modules/m_sasl.cpp | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'modules') diff --git a/modules/m_sasl.cpp b/modules/m_sasl.cpp index 7ec294575..cbda5d64c 100644 --- a/modules/m_sasl.cpp +++ b/modules/m_sasl.cpp @@ -109,7 +109,7 @@ class External : public Mechanism user = mysess->hostname + " (" + mysess->ip + ")"; NickCore *nc = certs->FindAccountFromCert(mysess->cert); - if (!nc || nc->HasExt("NS_SUSPENDED")) + if (!nc || nc->HasExt("NS_SUSPENDED") || nc->HasExt("UNCONFIRMED")) { Log(Config->GetClient("NickServ"), "sasl") << user << " failed to identify using certificate " << mysess->cert << " using SASL EXTERNAL"; sasl->Fail(sess); -- cgit