discordjs / Commando

Official command framework for discord.js
Apache License 2.0
496 stars 242 forks source link

Eval #363

Closed ghost closed 3 years ago

ghost commented 3 years ago

Made Eval Hidden

Better out of prying eyes

iCrawl commented 3 years ago

It can already only be used by the owners of the bot (defined in the owners array)

People know such a command exists, but they can already not execute it, so what gives?

ghost commented 3 years ago

Well, the reason was, many people who had bots in dev, or at least who I have seen use Commando, have tried to spam the bots with eval, and some of them even shut down due to the eval spam, that's why........

Safety measure against people who don't know about this

iCrawl commented 3 years ago

Again, the command is listed as ownerOnly, there is no way anyone apart from people listed as owners can execute this.

If people managed to eval without being an owner that means the developer of this bot deliberately made his own eval command and made it possible to be executed by anyone.

dragonfire535 commented 3 years ago

Not only this, but all hidden does is hide the command from the help command. Which should already happen anyway due to it being owner only.