zaki 🇱🇰
zaki 🇱🇰
DIAdiscord.js - Imagine an app
Created by zaki 🇱🇰 on 6/25/2024 in #djs-questions
Probably a stupid question, but is there security against RCE/ACE?
Hi, I don't like slash commands so i like to code a bot with messageCreate parsing. now, with the syntax
client.on("messageCreate", (message) => {
if (!message.content.startsWith(prefix) || message.author.bot) return false;

console.log(`Message from ${message.author.username}: ${message.content}`);
client.on("messageCreate", (message) => {
if (!message.content.startsWith(prefix) || message.author.bot) return false;

console.log(`Message from ${message.author.username}: ${message.content}`);
for example, are there any preventative measures within djs to ensure the someone can't just "$insert code here" to run arbitrary code in the node instance of the bot? Else, should I find a way to parse the message in such a way that it prevents this? I'm pretty inexperienced with js so I appreciate your patience. Thanks!
12 replies