Still doesn't work if a user has any spaces in their username, and also it's easily bypassed by just viewing the source and realising that you can add any username on to the ?username= variable in the URL, and come to think of it, wouldn't that also require that register globals is set to on?

Yes, the user could easily change their name by bypassing the username=variable. But, that is why right clicking is disabled on the index.php page. This is just meant to be a simple chat integration. If you are really worried about your members changing their names, then don't use this hack.

Actually, I agree with you. I don't think this hack is ready to be a full release. It has been moved to beta releases. If anyone wants to delete this thread, please do.

There should be some way to properly control the username since (for example) the shoutbox on my homepage uses vB names and the users can't change them.

I will look into doing something. I might end up just writing my own chat app to use with it :)

phpmychat came with my server. I installed it after i installed vb3 and it is already integrated. I didn't register with it,nor did any of my moderators (I have 9) and we all used our site ids and passwords to login. It worked fine.

phpMyChat 0.14.5 is the version that was installed.

I also have access to all the files,so i suppose i could skin it as well. I already changed a few minor things.