don't allow non-god users seeing other users' myaccess list

[NeonServV5.git] / src / cmd_neonserv_myaccess.c

diff --git a/src/cmd_neonserv_myaccess.c b/src/cmd_neonserv_myaccess.c
index 6480f7aad10cde03408da7d706cc0f4331026f73..0ab6418a10f95a854917bae6e029ff0e856a7ef8 100644 (file)
--- a/src/cmd_neonserv_myaccess.c
+++ b/src/cmd_neonserv_myaccess.c
@@ -111,6 +111,10 @@ static USERAUTH_CALLBACK(neonserv_cmd_myaccess_nick_lookup) {
 
 static void neonserv_cmd_myaccess_async1(struct ClientSocket *client, struct ClientSocket *textclient, struct UserNode *user, struct ChanNode *chan, char *nick, char *auth, char *chanmatch) {
     //we've got a valid auth now...
+    if(stricmp(user->auth, auth) && !isGodMode(user)) {
+        reply(textclient, user, "NS_MYACCESS_SELF_ONLY");
+        return;
+    }
     MYSQL_RES *res, *default_res;
     MYSQL_ROW user_row, chanuser_row, default_chan = NULL;
     char flagBuf[5];