discord.js addrole 命令可能被版主滥用

Question

我已经为我的机器人创建了一个添加角色命令，问题是，任何具有 mod 角色的人都可以滥用机器人来获得更高的角色，例如所有者角色，你们可以分享代码以添加到我当前的角色?

if (command === "addrole") {
  if (
    !message.member.roles.cache.some((r) =>
      ["Administrator", "Moderator"].includes(r.name)
    )
  )
    return message.reply("Sorry, you don't have permissions to add roles!");

  let member = message.mentions.members.first();
  let role = message.mentions.roles.first();
  if (!member)
    return message.reply("Please mention a valid member of this server");
  if (!role) return message.reply("please mention a valid role of this server");

  member.roles.add(role);
  return message.reply(
    ` ${role} has successfully been added to ${member.user.tag}`
  );
}

Answer 1

您可以使用Role.comparePositionTo()

const highest = member.roles.highest; // this is the members highest role

// if role is higher or equal to highest role
if(highest.comparePositionTo(role) <= 0)
  return message.channel.send('You cannot add roles equal/higher to that member\'s highest role')