msgq_append(0, mb, "%s%s=%c%s@%s", cli_name(cptr),
SeeOper(sptr,cptr) ? "*" : "",
cli_user(cptr)->away ? '-' : '+', cli_user(cptr)->username,
- HasHiddenHost(cptr) && !IsAnOper(sptr) && (sptr != cptr) ?
+ /* Do not *EVER* change this to give opers the real host.
+ * Too many scripts rely on this data and can inadvertently
+ * publish the user's real host, thus breaking the security
+ * of +x. If an oper wants the real host, he should go to
+ * /whois to get it.
+ */
+ HasHiddenHost(cptr) && (sptr != cptr) ?
cli_user(cptr)->host : cli_user(cptr)->realhost);
}