|Last Updated|| ||Ratings|| ||Unique User Downloads|| ||Download Rankings|
|2017-06-27 (8 months ago) ||Not enough user ratings||Total: 721 This week: 4||All time: 4,474 This week: 190|
This package implements chat box between users using encrypted messages.
They use a commonly agreed password to encrypt the messages using BlowFish before they are sent to the server via AJAX.
The server stores the encrypted messages in a MySQL database before they are delivered and decrypted to other chat users with the same password.
Prize: One ebook of choice by Packt
|When you want to implement a chat system between users of your application or site, there is always the concern that the messages may be viewed by people that manage the site, or even by spies and secret services because messages may have to be stored in the server before delivering them to the other users in the chat.
One way to avoid this problem is to implement end to end cryptography. This means that messages are encrypted before sent from the origin user and only decrypted by the destination users.
It uses a secret key that only the origin and destination users know about. This way messages may be securely stored on the server database to be able to deliver to the recipient later when he is not online, without the risk of a third party viewing the messages without knowing the secret password.
Uses a previously agreed password with the recipient, avoiding any initial key exchange across a network.
- Lightweight (45kB).
- POST AJAX used (GET AJAX data would be recorded in server logs).
- SHA-256-hashed key.
- Blowfish cipher in CBC-mode (base64 display overlays binary-encrypted data).
- Messages stored encrypted in the database.
- Configure /install.php (line 18 onwards) configuration section details: username, passwords, database etc.
- Configure /classes/cchat.class.php (line 18 onwards) constants to be identical to those in /install.php
- Run /install.php through your server (which, if you have root MySQL access, should mean set-up is now complete and CChat's /index.php now displays in a browser without connection errors to the server).
- Alter the timezone if required: /index.php (line 5):
- message display
- your name
- your password (use a strong password, previously agreed, to share messages with a recipient)
- your message
The decrypt button will decrypt existing encrypted messages in field 1, if the correct password is present in field 2.
Enter your name in field 2, password in field 3, and a message in field 4, then click the chat button.
A page refresh (encrypted messages displayed) or the wrong password will result in gibberish displayed in field 1.
The AJAX polling is 6 seconds between server checks for new messages (change the
iCheckFreq variable (in microseconds) /js/cchat.js (line 17)).
The last hour's messages are displayed in field 1 (change the
MESSAGE_BUFFER constant /classes/cchat.class.php (line 24)).
Character Set Limitation
- Intermittent duplicate message bug (refresh page and it disappears): /js/cchat.js (line 294).
- Some intermittent line break character removal when using Linux and Windows browser clients together.
- Matthew of JS Classes for testing / revision suggestions.
- Karl, who asked me to create a 'shoutbox' in 2010.
- To God (I narrowly escaped death in 1992).
- To Sofia.
CChat is released under the GPL v.3.
Won a JS Classes Innovation Award (August 2016).
||Applications that use this package
No pages of applications that use this class were specified.
If you know an application of this package, send a message to the author to add a link here.