From ee739c7e994bf2aa76eee5a56e33f9739b24608d Mon Sep 17 00:00:00 2001
From: Rob Swindell <rob@synchro.net>
Date: Sat, 29 May 2021 19:32:37 -0700
Subject: [PATCH] Don't allow downlinks (AreaFix add) of our "Unknown echoes"
 sub-board

It was recently pointed out to me that a downlink could link to the '*' echo via Area Manager (AreaFix) request. This was not intentional.
---
 src/sbbs3/sbbsecho.c | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/src/sbbs3/sbbsecho.c b/src/sbbs3/sbbsecho.c
index 503eb3256b..6897ab2e36 100644
--- a/src/sbbs3/sbbsecho.c
+++ b/src/sbbs3/sbbsecho.c
@@ -1568,6 +1568,10 @@ void alter_areas(str_list_t add_area, str_list_t del_area, fidoaddr_t addr, cons
 		SKIP_WHITESPACE(p);
 		SAFECOPY(echotag,p);         /* Areatag Field */
 		truncstr(echotag," \t\r\n");
+		if(echotag[0] == '*') {
+			fprintf(afileout, "%s\n", fields);	/* Don't allow down-links to our "Unknown area" */
+			continue;
+		}
 		FIND_WHITESPACE(p);
 		SKIP_WHITESPACE(p);
 		if((tp=strchr(p,';'))!=NULL) {
-- 
GitLab