Lightweight end-to-end encrypted chatbox, with an emphasis on speed and minimalism.
Uses a previously agreed password with the recipient, avoiding any initial key exchange across a network.
POST AJAX used (GET AJAX data would be recorded in server logs).
Blowfish cipher in CBC-mode (base64 display overlays binary-encrypted data).
Messages stored encrypted in the database.
Clone the repository (or extract the ZIP archive) into a suitable directory in the server's web directory
`sudo git clone https://github.com/Tinram/CChat.git`
On Linux/BSD servers, set appropriate file ownership / permissions
e.g. for Debian-based distros, Apache is www-data:
`sudo chown -R www-data:<username> CChat/`
`sudo chmod 664 install.php classes/cchat.class.php`
Edit the configuration section details in install.php (line 18 onwards): username, passwords, database, host etc.
Edit the relevant constants in /classes/cchat.class.php (line 19 onwards) to conform to the credentials used in install.php
Execute install.php via the terminal: `php install.php`
or through the server:
(which, if you have root MySQL access, should mean set-up is now complete)
View CChat's index.php in a browser, which if install.php ran correctly, should display without connection errors to the server, and display init: test as the first message.
Alter the timezone if required: index.php (line 7):
your password (use a strong password, previously agreed, to share messages with a recipient)
The decrypt button will decrypt existing encrypted messages in field 1, if the correct password is present in field 2.
Enter your name in field 2, password in field 3, and a message in field 4, then click the chat button.
A page refresh (encrypted messages displayed) or the wrong password will result in gibberish displayed in field 1.
The AJAX polling is 6 seconds between server checks for new messages (change the
iCheckFreq variable (in microseconds) /js/cchat.js (line 21)).
The last hour's messages are displayed in field 1 (change the
MESSAGE_BUFFER constant /classes/cchat.class.php (line 25)).
Character Set Limitation
Intermittent duplicate message bug (refresh page and it disappears): /js/cchat.js (line 297).
Some intermittent line break character removal when using Linux and Windows browser clients together.
Matthew of JS Classes for testing / revision suggestions.
Karl, who asked me to create a 'shoutbox' in 2010.
To God (I narrowly escaped death in 1992).
CChat is released under the GPL v.3.
<small>Won a JS Classes Innovation Award (August 2016).</small>