Hack Forums
ViewMy.PM - Upload and view your private messages online! Fast, secure, and FREE! - Printable Version

+- Hack Forums (https://hackforums.net)
+-- Forum: Tech (https://hackforums.net/forumdisplay.php?fid=444)
+--- Forum: Webmasters (https://hackforums.net/forumdisplay.php?fid=141)
+---- Forum: Website Showcase and Reviews (https://hackforums.net/forumdisplay.php?fid=172)
+---- Thread: ViewMy.PM - Upload and view your private messages online! Fast, secure, and FREE! (/showthread.php?tid=4015844)

Pages: Pages 1 2 3 4 5 6 7 8 9 10 11


* - iKinky - Jan 24, 2014

(Jan 24, 2014 01:19 AM)instxgram Wrote:  No offense but i think you should think a bit more about the design of the site 🤝 A little logo on the left and background pattern instead of solid colour would do wonders, PM me if you need some GFX Ill gladly do it for free

Other than that nice site and idea!

It's not like he's making people pay for it, I don't really think the aesthetics are a big deal as long as it works.


* - badbrains - Jan 24, 2014

(Jan 23, 2014 12:43 PM)Snorlax Wrote:  I can feel a large amount of irony in that post.
A lot of people (like myself), like to store PMs a place where they can be read easily.
Therefore I made this site, so you do not have to view them in a bad way through Notepad or Excel!

To be honest, I don't think this will ignite. It is more safe to keep your private messages on the website they belong to, and it doesn't really make it any easier to view them.

edit: I see that you are encrypting private messages. I still don't think this makes reading PMs any easier. It's good as an archive, though. Is that what it's intended purpose is?


* - chrisman0091 - Jan 24, 2014

(Jan 24, 2014 03:11 PM)Wolf Haley Wrote:  I think you mean sarcasm.

To be honest, I don't think this will ignite. It is more safe to keep your private messages on the website they belong to, and it doesn't really make it any easier to view them.

edit: I see that you are encrypting private messages. I still don't think this makes reading PMs any easier. It's good as an archive, though. Is that what it's intended purpose is?
No, he is right. Sarcasm is another word for verbal irony, which is what it really is.

OT: Personally I think it IS easier to read than just opening it in Notepad like normal. And keeping PMs on-site isn't always an option, as PM boxes fill(especially for people who aren't upgraded).


* - badbrains - Jan 24, 2014

(Jan 24, 2014 03:13 PM)chrisman0091 Wrote:  No, he is right. Sarcasm is another word for verbal irony, which is what it really is.

OT: Personally I think it IS easier to read than just opening it in Notepad like normal.

Yes, you are right. My mistake 😉
I should have thought about it more.


* - 'Snorlax - Jan 24, 2014

(Jan 24, 2014 03:13 PM)chrisman0091 Wrote:  No, he is right. Sarcasm is another word for verbal irony, which is what it really is.

OT: Personally I think it IS easier to read than just opening it in Notepad like normal. And keeping PMs on-site isn't always an option, as PM boxes fill(especially for people who aren't upgraded).

Well we are a few people who disagree then! ;)

(Jan 24, 2014 03:11 PM)Wolf Haley Wrote:  I think you mean sarcasm.

To be honest, I don't think this will ignite. It is more safe to keep your private messages on the website they belong to, and it doesn't really make it any easier to view them.

edit: I see that you are encrypting private messages. I still don't think this makes reading PMs any easier. It's good as an archive, though. Is that what it's intended purpose is?

The purpose was to upload and store your archives, and then view them globally wherever you go. The messages will be even more secure than on HF.
Imagine if your VMP (ViewMyPM) account got hacked. The hacker would have to know the encryption key for your archives, and without it, it is worthless.


* - badbrains - Jan 24, 2014

(Jan 24, 2014 03:17 PM)Snorlax Wrote:  Well we are a few people who disagree then! ;)

The purpose was to upload and store your archives, and then view them globally wherever you go. The messages will be even more secure than on HF.
Imagine if your VMP (ViewMyPM) account got hacked. The hacker would have to know the encryption key for your archives, and without it, it is worthless.

Can you have multiple keys for different inboxes (CSVs from different websites)?


* - 'Snorlax - Jan 24, 2014

(Jan 24, 2014 03:20 PM)Wolf Haley Wrote:  Can you have multiple keys for different inboxes (CSVs from different websites)?

That is what I would like to achieve. So far it is still in development, so a lot could change (such as better encryption).


* - badbrains - Jan 24, 2014

(Jan 24, 2014 03:22 PM)Snorlax Wrote:  That is what I would like to achieve. So far it is still in development, so a lot could change (such as better encryption).

Okay. Another thing I would like to point out is that I was not prompted to enter any encryption key. That leads me to believe that they are decrypted by the server.

Another issue: XSS. Look at this.
[Image: 9wo1sT2.png]


* - 'Snorlax - Jan 24, 2014

(Jan 24, 2014 03:25 PM)Wolf Haley Wrote:  Okay. Another thing I would like to point out is that I was not prompted to enter any encryption key. That leads me to believe that they are decrypted by the server.

Another issue: XSS. Look at this.
[Image: 9wo1sT2.png]

It has not been released, so there is no encryption system yet.

Hmm... I did do htmlspecialchars() and stripslashes()... Hmm.


* - badbrains - Jan 24, 2014

(Jan 24, 2014 03:41 PM)Snorlax Wrote:  It has not been released, so there is no encryption system yet.

Hmm... I did do htmlspecialchars() and stripslashes()... Hmm.

Oh. That sucks.

Don't bother with stripslashes().
Just use htmlentities().


* - VodkaNik - Jan 24, 2014

Tbh, most people will not use this simply because of how easy it is to take down. P.s I don't mean ddos.


* - 'Snorlax - Jan 24, 2014

(Jan 24, 2014 03:47 PM)Wolf Haley Wrote:  Oh. That sucks.

Don't bother with stripslashes().
Just use htmlentities().

Well yeah. I do not know. I did not create the backend stuff.

Any idea why XSS is possible then? 😧

(Jan 24, 2014 03:50 PM)VodkaNik Wrote:  Tbh, most people will not use this simply because of how easy it is to take down. P.s I don't mean ddos.

Then what do you mean? Please elaborate.


* - Johnny Ramone - Jan 24, 2014

Are the PMs encrypted on the server?


* - badbrains - Jan 24, 2014

(Jan 24, 2014 03:50 PM)Snorlax Wrote:  Any idea why XSS is possible then? 😧

No, I did not create the back end stuff. 🤭 Probably just a small error.


* - 'Snorlax - Jan 24, 2014

(Jan 24, 2014 03:51 PM)PцlpFїcтюп Wrote:  Are the PMs encrypted on the server?

Not yet. So unless somebody gets access to your account, your PMs will be safe.
Read this: https://hackforums.net/showthread.php?tid=4015844&pid=37898990#pid37898990

(Jan 24, 2014 03:54 PM)Wolf Haley Wrote:  No, I did not create the back end stuff. 🤭 Probably just a small error.

Most likely. I hope so. Thanks for pointing out.

Do you mind sending me that code you used in a PM?