Yes This ih how i did it,, currently it displays it in a text box when you click on it.. (THE APP IS A FULL GUI)
2. Steal user's cookie - in theory it should work if you know how to write a cookie stealer and implant it into an message or smile.
i think it is something like your hijack user profile, or is it ? or is it the user id ? ..
Thats a Graet idea, unfortunately "i dont yet know" ( will learn ) how to write a cookie stealer,, And i guess it may be possible to implant it as you suggested.. Will work on it..
The Profile hijack uses SQL injection URL based.
.....
talk under other names
a standalone feature, which will allow you to choose a victim from list and talk under that name (with autoupdate which sees who enteres room). this can be done either by stealing the ID or cookie. i sucessfully talked under other name, but i can't remember what i used, id or whole cookie.
Another great idea,, one i'm currently poundering on,, unfortunately anything i tried thus far sisnt work cause u need both ID's lout and ID.. I can the the lout ID, but havent found a way to get the ID .. I guess the same stealer you mentioned above is the key.. Will work on it.. I'm leaning to the fact you used the ID when you chatted under the dif.. name. I tried it and wound up getting timed out!!
![Sad :(](./images/smilies/icon_e_sad.gif)
![Smile :)](./images/smilies/icon_e_smile.gif)
If you can remember how you did it.. that will be most helpful.