Quote:
Originally posted by jamoss
Yes, it only passes the username through, it does not check your authentication tokens (unless you add each user as a chat user through your chat admin, but that is a nightmare if you have a large userbase like we do).
SO, this is why you must remove the chat button-- or else they can choose their own username for chat.
Because we have paid subscribers, I also put in an authentication check at the beginning of the chat php file, just to make sure the user is subscribed and their account is not expired.
Jennifer.
|
I must remove the "chat" button or the "Log in" button? Now that I have "auto login" set in my parameters, I don't see a "log in" page anylonger. It bypasses the log-in screen. WIll this work? Do I have the correct version of the scclient_en.cab set in my parameters to remove the "log-in" button?
ALso, how did you set the authentication check at the beginning of your chat.php file? DOes it check for a specific usergroup?
Another question...how do mods/admin show up in the room? I don't see any distinction for an admin in the chatrrom. Are they designated with a * or bold?
I just don't get the "admin console" at all. WHen I log in there, I'm not in the chatroom and only have a small little console. How does this chatroom check for admins?
Did I miss a bit of the hack for the log-in to check for admin?
Thanks for your help.