[123flashchat] - Please advise me about flashchat login process.

[darkyuu]

I'm trying to integrate to our system using ASP and it published on the internet. Due to we already have user/pasword table and our users prefer to have like single-sign-on that they must log in to our system before playing chat, I found that your FlashChat has a authentication function already and also found that to integrate, it needs to send clear text of both user name and password via javascript (and flash param tag) which is lack of security .

This is example of result of web source that has "clear text problem"

<script language="javascript">
openSWF('client/123flashchat.swf?init_user=channel&init_password=channel','100%','100%');
</script>
<div id="flashchat">
<noscript>
<object classid="clsid27CDB6E-AE6D-11cf-96B8-444553540000" codebase="http://download.macromedia.com/pub/s...rsion=6,0,0,0" width="634" height="476">
<param name=movie value="client/123flashchat.swf?init_user=channel&init_password=channel">
<param name=quality value=high>
<param name=menu value=false>
<param name=scale value=noscale>
<embed src="client/123flashchat.swf?init_user=channel&init_password=c hannel" quality=high pluginspage="http://www.macromedia.com/shockwave/...hockwaveFlash" type="application/x-shockwave-flash" width="634" height="476" menu="false" scale="noscale">
</embed>
</object>
</noscript>
</div>

*FROM ABOVE: Blue text is clear text (my username is channel and my password is channel) that shown in source code but I don't want it show.


- Is there any way that we can use only user name for authentication?

The application session already contains user name. There is no public registration but we allow only guest user if they are not logged in.

Please help me. Thank you

[amanda]

In our current authentication method,password must be included in.otherwise you can imagine how could server recognize this use is a registered user or guest user.the solution is that you don't have to include clear text password in the code,just include encrypted password to aviod this problem.