From d73a7292fc47cdea8b4ded5319e38ea740304dfa Mon Sep 17 00:00:00 2001
From: MangosArentLiterature
 <58055358+MangosArentLiterature@users.noreply.github.com>
Date: Tue, 6 Apr 2021 13:50:06 -0500
Subject: [PATCH] Add a check to /judgelog to only send IPIDs to users with
 appropriate permissions

---
 src/commands.cpp | 9 ++++++++-
 1 file changed, 8 insertions(+), 1 deletion(-)

diff --git a/src/commands.cpp b/src/commands.cpp
index 5c4b968..513118d 100644
--- a/src/commands.cpp
+++ b/src/commands.cpp
@@ -1288,7 +1288,14 @@ void AOClient::cmdJudgeLog(int argc, QStringList argv)
         return;
     }
     QString message = area->judgelog.join("\n");
-    sendServerMessage(message);
+    //Judgelog contains an IPID, so we shouldn't send that unless the caller has appropriate permissions
+    if (((checkAuth(ACLFlags.value("KICK"))) == 1) || (((checkAuth(ACLFlags.value("BAN"))) == 1))) {
+            sendServerMessage(message);
+    }
+    else {
+        QString filteredmessage = message.remove(QRegularExpression("[(]*[)]")); //Filter out anything between two parentheses. This should only ever be the IPID
+        sendServerMessage(filteredmessage);
+    }
 }
 
 QStringList AOClient::buildAreaList(int area_idx)