fincubator / tellerbot

Telegram Bot for over-the-counter trading
https://t.me/TellerBot
GNU Affero General Public License v3.0
23 stars 10 forks source link

No distinction between usernames and full names #22

Closed r4rdsn closed 4 years ago

r4rdsn commented 4 years ago

Bot doesn't see the difference between usernames and full names, which can be abused by unsetting username and setting full name to someone else's username. This problem complicates searching by usernames because it mixes orders from user that has inputted username (the one search meant) and everyone who set their full name to this username.

I propose a flag in the database which shows if mention is a username. Then we can search by mention and ignore orders which don't have this flag.