php - txt file chat system -
php - txt file chat system -
i have simple friend-to-friend facebook style chat scheme on site. when user starts conversation friend, new .txt file created , named based on id's of users, illustration 142and153.txt. messages saved. creates huge security risk because see conversation entering www.website.com/142and153.txt. how can hide files public? website finished , lastly thing want contains security risks this, can guys think of other problems kind of chat system, or should develop other kind of system?
well, can accomplish considering couple of things:
create new blank index.html in directory chat files beingness saved avoid intruders check out files there try utilize md5 function files name, md5(id1andid2) can generate 32 digit hexadecimal number based on real id of users, , 'i believe' hard predict. php facebook generics chat
Comments
Post a Comment