Show DevBest Live Chat

[NSA]

Hello!

Not too long ago I made a chat room which let's users come together and chat.
It's a nice feature to have on a website and can come in use.

I have a few screenshots which are below.
I'll be working on this a bit more, making admin tools etc...
There's still some stuff to do also.
So for now, this is V1.

Edit: There was a problem with the "Name" field where user's were able to execute scripts.
This has been fixed and a new download link has been provided.

-- UPDATES --

Added new download link to original post.

• Added auto URL's (
  You must be registered for see links
  RL changes to
  You must be registered for see links
  a href="URL">URL</a>)
• Added an option to register to reserve your username or sign in as a guest
• Added chat box commands (\ban and \unban so far)

Next to come:

• Admin sticky note
• Ability to mute users

Added checkbox for submitting when the enter key is pressed
Added some extra checks for Name and Message
Added Theme Chooser
Fixed Problems with Bans

Screenshot

-- Updates --

• Added admin area
• Added installation
• Added password recovery for administration
• Added some extra features to the admin area

Added some security to the installation.
When accessing the installation, if PHP can connect to the database, you don't need to access the file otherwise you can edit it from the config.
When accessing part two of the installation, it checks to see if you've been to part 1, if you haven't it will send you to the index page.
Admins can do the following from the admin area:

• Ban a user
• Un-Ban a user
• Change their password
• Search logs
• Search bans
• Search admins

Here is the admin area (still needs some styling)

Here is the installation (which also needs some styling)
Part 1 (Database)

Part 2 (Administration)

Password Recovery (Still needs styling)

New ideas are welcome.

Download

You must be registered for see links

Updated SQL

You must be registered for see links

Remember to move or rename the installation once finished!

-- NOTE --
The part where the user specifies their own username -- this part isn't finished.
The user can specify their username but, they can't reserve the username yet.

Live View

You must be registered for see links

 

[Macemore]

Looks nice man, a cool feature would be custom styles.

 

[NSA]

Might add some sort of jQuery CSS switcher which let's users choose their own look.

 

[Ecko]

Might need to work on name input

 

[Majestic]

This must be good for me.

 

[Markshall]

You should patch up XSS injections, I've just place an alert box on your site by doing it.

Also, since your script doesn't allow line breaks in the message, why use the textarea element? You're better off using text input.

Looks cool though. Try adding features such as word filter, being able to delete a message matching your IP etc.

 

[NSA]

There is actually a word filter, but only certain words.
If you go on the site, and type "fuck" you should be banned.

Wasn't aware of XSS Injections. Fuck.

 

[Markshall]

There is actually a word filter, but only certain words.
If you go on the site, and type "fuck" you should be banned.

Wasn't aware of XSS Injections. Fuck.

I wouldn't automatically ban users, I'd just censor the words with an asterisk or something. Say if a user was spelling a name like, "Dickson", and "dick" caught out in the filter and resulted in a ban, I don't think they'd be too happy.

Also, to patch them, only use escape the string when inserting into the database, don't filter the data when you're entering it into the database, filter it when you're retrieving it, if you get me?

 

[NSA]

Added checkbox for submitting when the enter key is pressed
Added some extra checks for Name and Message
Added Theme Chooser
Fixed Problems with Bans

 

[Wassim]

Thats real nice man an ability to scroll down and view history would be brilliant

 

[NSA]

Thats real nice man an ability to scroll down and view history would be brilliant

You can do so.

 

[Wassim]

You can do so.

I know just realized that the shout-box wasn't full enough now, Is viewing history also available?

 

[NSA]

I know just realized that the shout-box wasn't full enough now, Is viewing history also available?

What do you mean?
The chat box shows 40 posts before it starts cutting them out.

 

[Wassim]

What do you mean?
The chat box shows 40 posts before it starts cutting them out.

A history of the post's before the 40 other's

 

[NSA]

A history of the post's before the 40 other's

I'm going to be adding something like this for admins, but not regular users.

 

[Wassim]

I'm going to be adding something like this for admins, but not regular users.

Yh, Sounds nice goodluck with it ill folow this thread and monitor future development. Keep going.

 

[NSA]

You should patch up XSS injections, I've just place an alert box on your site by doing it.

Also, since your script doesn't allow line breaks in the message, why use the textarea element? You're better off using text input.

Looks cool though. Try adding features such as word filter, being able to delete a message matching your IP etc.

I added it so it was future proof.
I'll be adding nl2br to preserve line breaks once I get it fully secure.

 

[Markshall]

I added it so it was future proof.
I'll be adding nl2br to preserve line breaks once I get it fully secure.

For a chatbox I wouldn't add line breaks but it's your project, go for it.

 

[Weasel]

Some ideas.

Chatbox:
- Sticky note
- / commands
- Automaticly make links hyperlinks

Admin:
- Banned user list
- Prune logs
- Show all logs
- Wordfilter

You might also want to let people register their unique name.

 

[NSA]

I'm gonna add something which let's users either login / register or use it as a guest.
At which point if they're a guest, their name will be something like GUEST-{Random}.
Probably also add something to let people know who's online and away.