ClientCheckDLL bug

[00wesley00]

Hi all,

I'm using a older version of Serv-U than 8.0, and I am writing a DLL
for it in C using the Serv-U help file. The thing that I am writing is
a client access verification dll.
Basically what it must do is check user supplied username and password
and check if it exists in a external database.
The problem is that I am not able to get the password from the Serv-U
supplied structure (Aux field on SRVU_Passwd)
When checking what is inside Aux an empty string is showed. I tried
checking this by:

....
case SRVU_Passwd:
MessageBoxA(NULL, pEventStruc->User, pEventStruc->Aux, MB_OK);
break;
-----

When logging in with that dll loaded it does give a popup with the
username, but it doesn't show the password. Does anyone have a clue of
what I am doing wrong or whether it is actually possible at all?

Thanks for your time in advance,
Regards,

00wesley00

[Mark P. Peterson]

Serv-U 9.0, released today, re-introduces DLL support. There are
several ways to
do what you're asking with Serv-U 9.0, in-fact the sample provided
with Serv-U 9.0
demonstrates exactly how do do what you're asking. Download Serv-U
9.0 look
over the DLL code.

Mark P. Peterson - President
http://www.RhinoSoft.com
Voice: +1(262) 560-9627
FAX: +1(262) 560-9628

[00wesley00]

Thanks for your reply, but I can not upgrade to newer version, cause
I've wrote several addons already and if those have to be re-coded
it's not worth the effort. And I am also so familiar with it that I
never even thought of upgrading.

I saw FTPServerTools wrote "Serv-U Event Handler DLL" which seems to
write usernames and passwords to a file, but his site is down. Perhaps
(s)he can re-upload the source or explain where I've made a error?

00wesley00

On 29 sep, 23:39, "Mark P. Peterson" <mr.rh...@gmail.com> wrote:
> Serv-U 9.0, released today, re-introduces DLL support.  There are
> several ways to
> do what you're asking with Serv-U 9.0, in-fact the sample provided
> with Serv-U 9.0
> demonstrates exactly how do do what you're asking.  Download Serv-U
> 9.0 look
> over the DLL code.
>

> Mark P. Peterson - Presidenthttp://www.RhinoSoft.com

[FTPServerTools]

That site is available at www.tinyurl.com/ftpservertools and the dll
is totally free..
I have to say tho that the dll plugin mechanism from serv-u 9 is quite
different and I will build a new servuevent dll specifically for servu
9 and up. I have already done some programming with it.
Now in the old versions the way you store the password makes that you
do not see the password entered when you catch the event. The only way
to do that is to catch the PASS command. Now this can ALSO be done in
servu 9 (I already checked this).
ServuEvent.dll is a dll for serv-u 3,4,5 and 6. It does NOT write user
names to a file, unless you add some commandline command for
servuevent.dll to do so.
The old serv-u versions had the password stored in a way that they
could be reversed. This insecurity you can forget in serv-u 9 (unless
you state you really want it so).
Specifically if you want to stay up to date you have to realize that
servu 9 is in UNICODE. That means that all kinds of odd characters
(like chinese and russian and greek and so) will all be properly
translated by servu 9. This is not so with the really older versions.
So that may be a thing to really consider...