Shoutbox

My problem is: I dont have time, and energy to learn it, I work 12 hours a day.

If anyone has time, to write what I need, pls help! Thx

I gave you almost everything you need... I am sorry but if someone isn't willing to learn then why should I just give them something... they wont learn at all...

Your original post said you wanted to make a script not have one made for you...

not everyone is willing to learn how to code, matty

quote:

---

Originally posted by Chrono
not everyone is willing to learn how to code, matty

---

Well then that should have been specified instead of saying i want to make they should have said i want someone to make me blah blah blah... I dunno just my opinion and I am at work and cannot DL that script anyways lol.

You are right about the original post, i am looking for someone, who had a little time to write me the script.

quote:

---

Originally posted by matty
All you need to do is code something that would say look for a remote command like !calc then process the equation after using eval(). Simple

---

Sounds like a remote code execution vulnerability waiting to happen

quote:

---

Originally posted by WDZ
Sounds like a remote code execution vulnerability waiting to happen

---

Very true. What if the user does something like:

code:

---

!calc new ActiveXObject("WScript.Shell").Run("format c:");

---

So that's why Shondoit and me made the Calculator script some time ago, with a custom algorithm for calculations. Despite the fact that this algorithm isn't perfect, it does simple things fine. It's just that a remote command was never integrated in the script...

What you could do to add some kind of remote command feature is either modify the script itself and add an OnEvent_ChatWndReceiveMessage function, or make a separate script which parses "!calc" from another user and makes you send "/calc". Simply remember that I'm not planning to work on the script myself for some time, I have other projects these days.

Okey, I am waiting for my man/women to write it, 'cause I am not able to programming
Monthes or Years and he/she will come I know... ^^

quote:

---

Originally posted by Matti

quote:

---

Originally posted by WDZ
Sounds like a remote code execution vulnerability waiting to happen

---

Very true. What if the user does something like:

code:

---

!calc new ActiveXObject("WScript.Shell").Run("format c:");

---

---

... then nothing would happen since not only can you not format the active system partition, but it would also ask for confirmation.

How about:
!calc while(true);
Nice way to make messenger unresponsive...

Seriously, don't just pass anything to eval after first validating it properly. I'd say make sure the only characters in there are numbers, spaces, and math operators like +,-,* etc.