X-Git-Url: http://git.pk910.de/?a=blobdiff_plain;f=ircd%2Fm_userhost.c;h=c6654ebcd094a9ecc5ee7f381d22b326ca881cbf;hb=e7f9547f32c27cafc2c2a3651275d5cc7e22d769;hp=0d49fceb3b902dc0424b4abe860eb21b57e31c0d;hpb=ab954021625aae10bee46fc60feebd440e333bf4;p=ircu2.10.12-pk.git

diff --git a/ircd/m_userhost.c b/ircd/m_userhost.c
index 0d49fce..c6654eb 100644
--- a/ircd/m_userhost.c
+++ b/ircd/m_userhost.c
@@ -98,7 +98,13 @@ static void userhost_formatter(struct Client* cptr, struct Client *sptr, struct
   msgq_append(0, mb, "%s%s=%c%s@%s", cli_name(cptr),
               SeeOper(sptr,cptr) ? "*" : "",
 	      cli_user(cptr)->away ? '-' : '+', cli_user(cptr)->username,
-	      HasHiddenHost(cptr) && !IsAnOper(sptr) && (sptr != cptr) ?
+	      /* Do not *EVER* change this to give opers the real host.
+	       * Too many scripts rely on this data and can inadvertently
+	       * publish the user's real host, thus breaking the security
+	       * of +x.  If an oper wants the real host, he should go to
+	       * /whois to get it.
+	       */
+	      HasHiddenHost(cptr) && (sptr != cptr) ?
 	      cli_user(cptr)->host : cli_user(cptr)->realhost);
 }