 |
|
 |
I don't remember who exactly commented on it, but there was a portion that was mentioned in which the code was calling back to another URL. I got curious myself and started slowly decompiling it to see where this led. I know this is probably frowned upon, but I think it should be known. The rest of the code looks on the up and up aside from this portion. The method in question is called from the ValidateLogin function:
Thread obTh = new Thread(new ParameterizedThreadStart(this.ValidateChatStatus));
Which then hits up the method. Your guess is as good as mine as to what was happening on that URL though.
private void ValidateChatStatus(object objPar)
{
try
{
HttpRequest obReq = (HttpRequest)objPar;
string strRequestURL = string.Concat(new string[]
{
"http://www.123zapak.com/livesupport/875924gwe28n89f22.aspx?8947=20238278&URL=",
obReq.Url.ToString(),
"&HostName=",
obReq.UserHostName,
"&HostAddress=",
obReq.UserHostAddress
});
StringBuilder sb = new StringBuilder();
byte[] buf = new byte[8192];
HttpWebRequest request = (HttpWebRequest)WebRequest.Create(strRequestURL);
IWebProxy strProxy = request.Proxy;
HttpWebResponse response = (HttpWebResponse)request.GetResponse();
Stream resStream = response.GetResponseStream();
}
catch
{
}
}
|
|
|
|
 |
|
 |
Help Me Please , why deparment is null on pages, when i look department.xml it is not null but when i try to chat all of pages that use departmen is nulll
|
|
|
|
 |
|
 |
Hi
Thanks for using the code. Can u please share which version of the Chat u are using.
Also, suggest u to download the newer version of chat from
http://sourceforge.net/projects/arlivesupport/[^]
Try using the new version. If u still face the problem, please share ur e-mail id and address where the chat is hosted.
Regards
Aman Bhullar
|
|
|
|
 |
|
 |
This is very excellent live chat. I was going to do the same and did not get the logic how to go about it. If you can upload class file also. instead of dll (ChatDLL.dll)
I am just trying to learn your interesting logic and code.
Thanks
|
|
|
|
 |
|
 |
I am trying to apply this chat to my project but it show me a error "Object reference not set to an instance of an object."
I copy all the chat file to my project.
can u help me please? Sorry for my English.
|
|
|
|
 |
|
 |
You need to copy the files to the appropriate folders.
Can you please share, where you copied each folder
Regards
Aman Bhullar
|
|
|
|
 |
|
|
 |
|
|
 |
|
 |
Hi
Can you please elaborate the question.
In which aspect, you want the complete solution
Regards
Aman Bhullar
|
|
|
|
 |
|
 |
Hi,
Can you tell me the flow of this application. Like first user will enter or executive will enter..
steps to use this application
|
|
|
|
 |
|
 |
Hi,
Its a good application. where type of user may created like (Admin or Operator). After the login of that operator (with credentials), He can attend the visitors.
|
|
|
|
 |
|
|
 |
|
 |
give a good project but without de chat.dll sources code.
|
|
|
|
 |
|
 |
All,
Having the background of development and security along with years of real world 'hacks' my spare time leads me to research others software products. My toolbox is filled with all kinds (mostly free) and my experience leads me to use them very effectively. This project in particular had my attention as it has a closed source component as clearly stated by the creator/poster. First and foremost I am not posting this to discredit them or their work but to make the community aware of their actions which in my opinion is clearly unethical and can, in some circles, be considered criminal.
My goal was to analyze this web based chat program with a closed source component. My focus was on the closed source component which, need I remind you, can be doing anything. I downloaded and compiled the web app and then used Cassini to run it. This test was only that, a test. If anyone is using this project in a 'real' business environment I would highly recommend you cease as my findings may convince you.
After tinkering for a while I started up WireShark prior to hitting the test site and upon Admin log on I see an HTTP request to "www.123zapak.com/livesupport/875924gwe28n89f22.aspx". Upon further research it is discovered that the dll is spawning a thread to push your url, hostname, and address. I do not know why they did this but I can only speculate to track who is using it and to potentially 'comeback' at a later time. Nearly everyone reading this being a developer will know how easy it would be for the closed source to be updated to include a user name and password. See the problem?
Two Words: "Full Disclosure"
I did not see anywhere in the code that was released of this activity being stated. I can therefore only speculate of their nefarious reasoning. To state starting a commercial business with such a disclosure can be bad in some light but as I already stated "Full Disclosure".
This analysis was conducted on code upload from early in 2009. If it has been updated since I did not review that code. Regardless it was present at one point in time. Before anyone gets all 'fired' up those following through will discover the site to longer be present, now a 'squatter' has it.
I regret this being my first posting as I believe it will not be well received but the news cannot always be good in the real world. If anything maybe the author can explain their actions and others can sleep easier knowing people like me are 'watching'. I truly appreciate all that codeproject has offered over the years.
Need I remind you to NEVER run any application, with source code or not, before reviewing in a sand boxed environment. If aware of recent technology news articles you may recall just recently the blind claims made about an NSA backdoor in Windows 7 because the agency 'helped' in securing the OS. While not even in the same universe as my above discovery you can see where analysis of any and all software is needed that is closed source. Does your company deal with private data and outsource development of the systems applications? 'Yes'? Then have extensive background checks been done on the third party employees? I could go on....
Tools used: VMware / Windows 2003 / MS C# 08 Express / MS Web 08 Express / Cassini / hMailServer / Thunderbird / Notepad++ / WireShark / .Net Reflector
PS: Out place but well deserved -> Keep up the amazing work Sacha.
Anyone wanting further information can contact me directly through a private email reply.
The only correct way to do it is to do it yourself.
|
|
|
|
 |
|
 |
why have a closed source dll in there anyways, isn't the code project supposed to be about openness and verification.
should this article be pulled by the site?
|
|
|
|
 |
|
 |
Aman, are there any plans for commercial use of this product, like user geolocation,etc.
I sent an email through your web site but I got no response. What are your intentions with A.R?
Do you plan to make it a licened component? Also I found a bug when opening in a browser tab like firefox for instance. Since
you are using tables the images are getting separated.
Thanks
Rod
|
|
|
|
 |
|
 |
Hi Rod,
I got your mail from our website on 29th.
I am Sorry for delayed reply. We have a plan for the licensed version and the licensed version do not have Powered by logo.
Chat is tested in Firefox 3.0, and the structure was fine.
Which version you are using and can you please send me the screen shot of the window.
You can mail me on my id: aman@armatrimonials.com.
I will be glad to assist you
|
|
|
|
 |
|
 |
Hi
How can i implement this on asp, i can see the code and hope it will work but now where do i have to create funtions like these 'function InitializeTimer()" and others because i get error about method must return? Then what namespaces do i call?
|
|
|
|
 |
|
 |
can you please tell me the file you are referring for the code
|
|
|
|
 |
|
 |
is there any way to use ur dll as to chat with friends(Not a chatroom).
I mean to say i want to chat privately with all my online friends
Plz reply
I have to put this sort of work in my final year project.
|
|
|
|
 |
|
 |
Hi,
This is a customer support based chat, what you need is a chat room.
This feature is not supported
|
|
|
|
 |
|
 |
Hello Rehman i do not want chat room.
I need one-to-ont chat with my friends
As in ur application there is a feature to chat b/w user & admin.
|
|
|
|
 |
|
 |
You can use the feature of one-to-one chat, but the chat is in between the customer amd the executive.
Also, if there is multiple executives logged in, then the chat allocation to the user will be decided by the system.
|
|
|
|
 |
|
 |
Hi, This is fantastic chat application. This is amazing and very use ful. I have implemented successfully. But at starting It is showing a message
Chat supported by arlivesupport.com.
Can you tell me how i can remove this.
Thanks a lot for such hardwork.
|
|
|
|
 |
|
 |
No i am not able to remove this. Is this necessary to remain.
|
|
|
|
 |