Anonymous - 2002-06-02

Just as i already claimed in the Bug tracker,

phpmychat version : 0.14.5
HTTPServer : all i guess
OS : all supportet i guess

If someone enters following in his Browser he would
be able to discover IP Adresses of ChatUsers.

http://Serverurl/chat/whois_popup.php3?
L=german&power=all&U=cobain&R=Roomname

I found this Bug while developing a special userlist
together with usermessaging System.

Solution may one of the following 2 :
1. Ensure that only registered Users could use the
whois function
or
2. ensure that the whois function could only be
called from within the chat.

I think that this behaviour is not wanted by the
authors of phpmychat.

greetings ...
voss