From fd3f9ec08f3b026c4232d652df06ea91af6c6ed1 Mon Sep 17 00:00:00 2001
From: rking32 <sljohnwick@gmail.com>
Date: Sat, 5 Feb 2022 12:18:44 +0530
Subject: [PATCH] improve cmd detection in help + filter risky cmds with
 addscmd -all

---
 userge/plugins/help.py       | 19 ++++++++++---------
 userge/plugins/tools/sudo.py |  3 +++
 2 files changed, 13 insertions(+), 9 deletions(-)

diff --git a/userge/plugins/help.py b/userge/plugins/help.py
index e3fc6c8f4..ffcdd4d94 100644
--- a/userge/plugins/help.py
+++ b/userge/plugins/help.py
@@ -72,15 +72,16 @@ async def helpme(message: Message) -> None:  # pylint: disable=missing-function-
                             f"    📚 <b>info:</b>  <i>{cmd.doc}</i>\n\n")
             out_str += f"""📕 <b>Usage:</b>  <code>{Config.CMD_TRIGGER}help [command_name]</code>"""
         else:
-            commands = userge.manager.enabled_commands
-            key = key.lstrip(Config.CMD_TRIGGER)
-            key_ = Config.CMD_TRIGGER + key
-            if key in commands:
-                out_str = f"<code>{key}</code>\n\n{commands[key].about}"
-            elif key_ in commands:
-                out_str = f"<code>{key_}</code>\n\n{commands[key_].about}"
-            else:
-                out_str = f"<i>No Module or Command Found for</i>: <code>{message.input_str}</code>"
+            triggers = (Config.CMD_TRIGGER, Config.SUDO_TRIGGER, Config.PUBLIC_TRIGGER)
+            for _ in triggers:
+                key = key.lstrip(_)
+            out_str = f"<i>No Module or Command Found for</i>: <code>{message.input_str}</code>"
+            for name, cmd in userge.manager.enabled_commands.items():
+                for _ in triggers:
+                    name = name.lstrip(_)
+                if key == name:
+                    out_str = f"<code>{cmd.name}</code>\n\n{cmd.about}"
+                    break
     await message.edit(out_str, del_in=0, parse_mode='html', disable_web_page_preview=True)
 
 if userge.has_bot:
diff --git a/userge/plugins/tools/sudo.py b/userge/plugins/tools/sudo.py
index d916a79ce..343652bdb 100644
--- a/userge/plugins/tools/sudo.py
+++ b/userge/plugins/tools/sudo.py
@@ -123,8 +123,11 @@ async def add_sudo_cmd(message: Message):
         await SUDO_CMDS_COLLECTION.drop()
         Config.ALLOWED_COMMANDS.clear()
         tmp_ = []
+        restricted = ('addsudo', 'addscmd', 'exec', 'eval', 'term')
         for c_d in list(userge.manager.enabled_commands):
             t_c = c_d.lstrip(Config.CMD_TRIGGER)
+            if t_c in restricted:
+                continue
             tmp_.append({'_id': t_c})
             Config.ALLOWED_COMMANDS.add(t_c)
         await asyncio.gather(