Register Members List Search Today's Posts Mark Forums Read

Reply
 
Mod Options
PMCrypt - Private Message Encryption Details »
PMCrypt - Private Message Encryption
Mod Version: 1.1.0, by magnus (Member) magnus is offline
Developer Last Online: Feb 2012 I like it Show Printable Version Email this Page

This modification is in the archives.
vB Version: 3.6.4 Rating: (9 votes - 4.78 average) Installs: 47
Released: 21 Feb 2007 Last Update: 22 Feb 2007 Downloads: 372
Not Supported DB Changes Uses Plugins Is in Beta Stage  

Keywords: Private, Message, PM, Encrypt, Encode, Security

Description:
Encrypts Private Messages within the MySQL database. Allows for on-the-fly decryption without the need for a shared key.


Details:
This hack will encrypt sent messages within your MySQL database. No longer will they be viewable in plaintext, thus affording your members a little more security with their private correspondance.

Please be aware that this is not a total security solution. This was devised with simplicity as well as security in mind -- such as that the encryption method used is NOT to be assumed "unbreakable" by any stretch of the imagination.

The messages are encrypted using a method developed and credited to AITOR SOLOZABAL MERIN by where text is encrypted/decrypted using a simple but powerful XOR method without a known key. Implicitly, the key is defined by the string itself in a character by character way. There are 4 items to compose the unknown key for the character in the algorithim:
  1. The ascii code of every character of the string itself
  2. The position in the string of the character to encrypt
  3. The length of the string that include the character
  4. Any special formula added by the programmer to the algorithm to calculate the key to use
This product does not explicitly rely on any vBulletin functions, thus there should not be any problems with future upgrades, etc.

This product was developed by request of FGENETICS and DOOGIE88.


Installation:
1. Download and import the product-pmcrypt1.1.0.xml file via the Product Manager.

2. Enable the product via the AdminCP (vBulletin Options > Private Message Encryption)

3. ???

4. Profit


Version History:
v1.0.0 - Initial Release
v1.0.1 - Fixed bug when replying to an encrypted message.
v1.1.0 - Fixed issue with reply and preview. Encapsulated encryption within base64_encode(); for storage. Smilies no longer run risk of breaking encryption.

* Once enabled, all PM's sent thereafter will be encrypted. This means that should you choose to disable and/or uninstall the product, said PM's will remain encrypted -- rendering them unreadable.

* Please note that this modification was developed on a forum with a userbase of 1 (myself). I've tested it for basic functionality but I cannot guarantee functionality or behavior on your forum. So, please -- make backups before installing this product!

Download Now

Only licensed members can download files, Click Here for more information.

Screenshots

Click image for larger version

Name:	pmcrypt_ss1.jpg
Views:	1342
Size:	34.7 KB
ID:	60857   Click image for larger version

Name:	pmcrypt_ss2.jpg
Views:	815
Size:	13.3 KB
ID:	60858  

Show Your Support

  • To receive notifications regarding updates -> Click to Mark as Installed.
  • If you like this modification support the author by donating.
  • This modification may not be copied, reproduced or published elsewhere without author's permission.
Similar Mod
Mod Developer Type Replies Last Post
Mini Mods GS - Visitor Message Private Message Notification 1.0 ForumsMods vBulletin 3.7 Add-ons 10 27 Oct 2011 11:56

  #31  
Old 24 Feb 2007, 00:08
magnus's Avatar
magnus magnus is offline
 
Join Date: Apr 2002
Originally Posted by UltimateOreo! View Post
Do private messages even need an encryption? As far as i know, it is not possible to "steal" or even intercept private messages. Anyway, good idea as far as peace of mind goes.
From what I can tell, those who requested this hack were more concerned with assuring the members that the Admins themselves weren't reading their PMs.
Reply With Quote
  #32  
Old 25 Feb 2007, 15:27
Bubble #5 Bubble #5 is offline
 
Join Date: Apr 2005
Thumbs up

Great idea for a hack Magnus Thank you for taking the time to make it and sharing it with us. In this day and age it should be a default vb feature.
__________________
If we don't help each other when we can, then we're not making this world a better place.
Reply With Quote
  #33  
Old 28 Mar 2007, 17:51
Mys Mys is offline
 
Join Date: Jun 2006
Very nice. Very timely.

If it is possible and not a big task, I would like to suggest the following:

- A user cp option (checkbox) permitting the member to enable/disable this function;

- A message level option (checkbox) permitting the member to elect this option on a message by message basis;

- Admin level options enabling or disabling each of the above;

Why? As pointed out, there is a degree of risk in using the encryption mod, i.e. if the mod is for whatever reason disabled, removed, broken, whatever - encrypted PMs are effectively lost. Therefore, I would like to put the burden of responsibility for using encryption at the member level. Inform them of the trade-offs and that they use at their option and own risk.

Thanks for the work you have done on this. Installed.

Reply With Quote
  #34  
Old 12 Apr 2007, 06:57
fgenetics fgenetics is offline
 
Join Date: Dec 2006
u r the bomb! thanks much!!!! nominated and installed
Reply With Quote
  #35  
Old 12 Apr 2007, 07:10
Dream's Avatar
Dream Dream is offline
 
Join Date: Oct 2001
I'll be sure to add a decoder for this in my Read PMs hack :O

/ducks and runs
Reply With Quote
  #36  
Old 12 Apr 2007, 11:32
magnus's Avatar
magnus magnus is offline
 
Join Date: Apr 2002
Originally Posted by Dream View Post
I'll be sure to add a decoder for this in my Read PMs hack :O

/ducks and runs
The decoding routine is in the source. Enjoy.
Reply With Quote
  #37  
Old 13 Jun 2007, 06:16
SuperTaz's Avatar
SuperTaz SuperTaz is offline
 
Join Date: Apr 2007
Real name: Jeremy
Installed...Great hack
__________________
Global Gamers
My Modifications
Reply With Quote
  #38  
Old 13 Jun 2007, 06:18
sonichero sonichero is offline
 
Join Date: Jan 2007
I would install this but it conflicts with my "read pms" hack...
Reply With Quote
  #39  
Old 13 Jul 2007, 11:34
Mrdby Mrdby is offline
 
Join Date: Mar 2007
Real name: MrDby
anybody else?
Reply With Quote
  #40  
Old 13 Jul 2007, 12:15
magnus's Avatar
magnus magnus is offline
 
Join Date: Apr 2002
Originally Posted by sonichero View Post
I would install this but it conflicts with my "read pms" hack...
Uh, that's kind of the point. The whole point of encrypting private messages is to provide some form of assurance to your users that neither you (nor anyone else) is easily reading them.
Reply With Quote
  #41  
Old 13 Jul 2007, 12:16
magnus's Avatar
magnus magnus is offline
 
Join Date: Apr 2002
Originally Posted by Mrdby View Post
anybody else?
Reply With Quote
  #42  
Old 31 Aug 2007, 08:49
cclaerhout's Avatar
cclaerhout cclaerhout is offline
 
Join Date: Aug 2004
Real name: Cédric Claerhout
There is a bug with this product and vBulletin infraction system. When you want to give user some penality points, here is the message :

""please complete both the subject and message fields."

When you desactivate this hack, it works.
__________________
Reply With Quote
  #43  
Old 31 Aug 2007, 09:01
cclaerhout's Avatar
cclaerhout cclaerhout is offline
 
Join Date: Aug 2004
Real name: Cédric Claerhout
Here is a patched version

Warning : once product installed, never delete it otherwise you won't be able to read your pm anymore. Just UPDATE it (there's no problem to do that).
Attached Files
File Type: xml product-pmcrypt.xml (6.5 KB, 19 views)
__________________
Reply With Quote
  #44  
Old 31 Aug 2007, 09:12
wIrEs wIrEs is offline
 
Join Date: Dec 2006
why never delete it? is it hard to code an Admin CP option to decrypt ALL messages before deleting this mod ?? over even, decrypt all messages before upgrading for a new version just in case something goes wrong ?, and let's say, also add a PM checkbox to let the user encrypt the message if they want...this is for encrypting sensitive information or if you're going to just say hi to somebody encrypting that kind of messages is pointless in my opinion, anyway cool mod overall but was expecting some more Unhackable' idea. I will use it anyway since before the messages can be cracked, a cracker needs to crack my database LOL.
Reply With Quote
  #45  
Old 31 Aug 2007, 09:22
cclaerhout's Avatar
cclaerhout cclaerhout is offline
 
Join Date: Aug 2004
Real name: Cédric Claerhout
Well i'm not the coder, but this hack is very usefull when there are several admin and you want to be sure none of them will connect the DB to read PMs. By the way, your idea to decrypt all messages before deleting this mod is really good.
__________________
Reply With Quote
Reply


Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 
Mod Options

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off


New To Site? Need Help?

All times are GMT. The time now is 23:23.

Layout Options | Width: Wide Color: