fix: make large roles unmentionable and add check to strip MentionEveryone from everyone role

src/commands/fixPings.js

@@ -0,0 +1,35 @@
+const { PermissionFlagsBits } = require('discord.js');
+const { successEmbed } = require('../utils/embeds');
+
+module.exports = {
+    async execute(client, message) {
+        const guild = await client.guilds.fetch(process.env.GUILD_ID);
+        await guild.roles.fetch();
+
+        const log = [];
+
+        // 1. Fix @everyone role (remove MentionEveryone)
+        const everyoneRole = guild.roles.everyone;
+        if (everyoneRole.permissions.has(PermissionFlagsBits.MentionEveryone)) {
+            const newPerms = everyoneRole.permissions.remove(PermissionFlagsBits.MentionEveryone);
+            await everyoneRole.setPermissions(newPerms);
+            log.push(`✅ Removed MentionEveryone permission from **@everyone**`);
+        } else {
+            log.push(`⏭️ **@everyone** already cannot mention everyone/here`);
+        }
+
+        // 2. Make large/public roles unmentionable
+        const unmentionableRoles = ['@@ Verified', '@@ Buyer', '@@ Booster', '@@ Known', '@@ Helper'];
+        for (const rName of unmentionableRoles) {
+            const role = guild.roles.cache.find(r => r.name === rName);
+            if (role && role.mentionable) {
+                await role.setMentionable(false);
+                log.push(`✅ Made **${rName}** unmentionable`);
+            } else if (role) {
+                log.push(`⏭️ **${rName}** is already unmentionable`);
+            }
+        }
+
+        await message.reply({ embeds: [successEmbed('✅ Ping Exploit Fixed', log.join('\n'))] });
+    },
+};

src/config.js

@@ -81,35 +81,35 @@ const Roles = [
         color: '#1abc9c',
         permissions: [],
         hoist: true,
-        mentionable: true,
+        mentionable: false,
     },
     {
         name: '@@ Known',
         color: '#9b59b6',
         permissions: [],
         hoist: true,
-        mentionable: true,
+        mentionable: false,
     },
     {
         name: '@@ Booster',
         color: '#f47fff',
         permissions: [],
         hoist: true,
-        mentionable: true,
+        mentionable: false,
     },
     {
         name: '@@ Verified',
         color: '#2ecc71',
         permissions: [],
         hoist: false,
-        mentionable: true,
+        mentionable: false,
     },
     {
         name: '@@ Buyer',
         color: '#3498db',
         permissions: [],
         hoist: true,
-        mentionable: true,
+        mentionable: false,
     },
 ];
 

src/events/messageCreate.js

@@ -16,6 +16,7 @@ const permissionAudit = require('../commands/permissionAudit');
 const postRules = require('../commands/postRules');
 const postDisclaimer = require('../commands/postDisclaimer');
 const applyUpdates = require('../commands/applyUpdates');
+const fixPings = require('../commands/fixPings');
 
 const OWNER_ID = process.env.OWNER_ID;
 
@@ -31,6 +32,7 @@ const commands = {
     'post rules': postRules,
     'post disclaimer': postDisclaimer,
     'apply updates': applyUpdates,
+    'fix pings': fixPings,
 };
 
 module.exports = {
@@ -145,7 +147,7 @@ module.exports = {
                 content.startsWith('backup') || content.startsWith('shutdown') ||
                 content.startsWith('ticket') || content.startsWith('permission') ||
                 content.startsWith('post') || content.startsWith('drop') ||
-                content.startsWith('apply')) {
+                content.startsWith('apply') || content.startsWith('fix')) {
                 return message.reply({ embeds: [errorEmbed('Unknown Command', `Did you mean one of these?\n${[...Object.keys(commands), 'drop'].map(c => `\`${c}\``).join('\n')}`)] });
             }
             return;