callumacrae/Hex — Issue #15: Check if nick exists before sending
Author: Dead-I
Created: 2012-02-15 10:19:57+00:00
State: open
Labels: Improvement

At the moment, the @ symbol can be used to direct messages towards a certain person. Although this is a rather good feature, it currently does not detect whether the requested user exists or not. This may be a very useful improvement to prevent spamming and abuse.

If a bot from BotServ was in the room, it would probably be possible for any user to perform any channel commands in the room (like op, devoice, etc). Here is an example of this exploit if a BotServ bot was in channel. In this case, the BotServ bot is called 'Holly'.

```<+User> hex ping @ !op User blah```
```<@Hex> !op User blah: PONG```
```* Holly set mode +o for User```