Register Members List Search Today's Posts Mark Forums Read

Reply
 
Mod Options
PMCrypt - Private Message Encryption Details »
PMCrypt - Private Message Encryption
Mod Version: 1.1.0, by magnus (Member) magnus is offline
Developer Last Online: Feb 2012 I like it Show Printable Version Email this Page

This modification is in the archives.
vB Version: 3.6.4 Rating: (9 votes - 4.78 average) Installs: 47
Released: 21 Feb 2007 Last Update: 22 Feb 2007 Downloads: 372
Not Supported DB Changes Uses Plugins Is in Beta Stage  

Keywords: Private, Message, PM, Encrypt, Encode, Security

Description:
Encrypts Private Messages within the MySQL database. Allows for on-the-fly decryption without the need for a shared key.


Details:
This hack will encrypt sent messages within your MySQL database. No longer will they be viewable in plaintext, thus affording your members a little more security with their private correspondance.

Please be aware that this is not a total security solution. This was devised with simplicity as well as security in mind -- such as that the encryption method used is NOT to be assumed "unbreakable" by any stretch of the imagination.

The messages are encrypted using a method developed and credited to AITOR SOLOZABAL MERIN by where text is encrypted/decrypted using a simple but powerful XOR method without a known key. Implicitly, the key is defined by the string itself in a character by character way. There are 4 items to compose the unknown key for the character in the algorithim:
  1. The ascii code of every character of the string itself
  2. The position in the string of the character to encrypt
  3. The length of the string that include the character
  4. Any special formula added by the programmer to the algorithm to calculate the key to use
This product does not explicitly rely on any vBulletin functions, thus there should not be any problems with future upgrades, etc.

This product was developed by request of FGENETICS and DOOGIE88.


Installation:
1. Download and import the product-pmcrypt1.1.0.xml file via the Product Manager.

2. Enable the product via the AdminCP (vBulletin Options > Private Message Encryption)

3. ???

4. Profit


Version History:
v1.0.0 - Initial Release
v1.0.1 - Fixed bug when replying to an encrypted message.
v1.1.0 - Fixed issue with reply and preview. Encapsulated encryption within base64_encode(); for storage. Smilies no longer run risk of breaking encryption.

* Once enabled, all PM's sent thereafter will be encrypted. This means that should you choose to disable and/or uninstall the product, said PM's will remain encrypted -- rendering them unreadable.

* Please note that this modification was developed on a forum with a userbase of 1 (myself). I've tested it for basic functionality but I cannot guarantee functionality or behavior on your forum. So, please -- make backups before installing this product!

Download Now

Only licensed members can download files, Click Here for more information.

Screenshots

Click image for larger version

Name:	pmcrypt_ss1.jpg
Views:	1342
Size:	34.7 KB
ID:	60857   Click image for larger version

Name:	pmcrypt_ss2.jpg
Views:	815
Size:	13.3 KB
ID:	60858  

Show Your Support

  • To receive notifications regarding updates -> Click to Mark as Installed.
  • If you like this modification support the author by donating.
  • This modification may not be copied, reproduced or published elsewhere without author's permission.
Similar Mod
Mod Developer Type Replies Last Post
Mini Mods GS - Visitor Message Private Message Notification 1.0 ForumsMods vBulletin 3.7 Add-ons 10 27 Oct 2011 11:56

  #16  
Old 22 Feb 2007, 14:22
doogie88 doogie88 is offline
 
Join Date: Oct 2006
Hello
I tested a brand new message with the new version and it didn't encrypt, maybe it had to do with smilies though.
Reply With Quote
  #17  
Old 22 Feb 2007, 15:14
Snake's Avatar
Snake Snake is offline
 
Join Date: Mar 2005
Location: Cleveland, OH
Real name: Josh
Oh my god! This is a great hack!
Reply With Quote
  #18  
Old 22 Feb 2007, 17:02
magnus's Avatar
magnus magnus is offline
 
Join Date: Apr 2002
Ok, I've found the problem. I'm removing this for download until I upload the new version -- which should be in the next 20 minutes or so.

I would suggest deleting any encrypted PM's you've sent, as the new version will be unable to read them. I've had to wrap the encryption with base64_encode(); to allow for smoother storage within the SQL db.
Reply With Quote
  #19  
Old 22 Feb 2007, 17:12
OpikGer OpikGer is offline
 
Join Date: Aug 2006
hm, perhaps I'm too stupid, but if the boardsoft can decrypt the pm for the user - why
can't someone who has access to the db decrypt it?
Reply With Quote
  #20  
Old 22 Feb 2007, 17:26
magnus's Avatar
magnus magnus is offline
 
Join Date: Apr 2002
Originally Posted by OpikGer View Post
hm, perhaps I'm too stupid, but if the boardsoft can decrypt the pm for the user - why
can't someone who has access to the db decrypt it?
As stated in the original post:

Please be aware that this is not a total security solution. This was devised with simplicity as well as security in mind -- such as that the encryption method used is NOT to be assumed "unbreakable" by any stretch of the imagination.
Reply With Quote
  #21  
Old 22 Feb 2007, 17:35
magnus's Avatar
magnus magnus is offline
 
Join Date: Apr 2002
Ok, v1.1.0 is available for download. This fixes all bugs listed so far:
  • PM's, replies and previews are working.
  • Smilies no longer have a chance of breaking encryption
  • Encrypted text is now encapsulated within base64_encode(); to allow for proper storage within MySQL database

*** Please note that messages encrypted with v1.0.0 - v1.0.1 will NOT be viewable with v1.1.0. The was an unfortunate but necessary change that needed to be made. I would suggest deleting all previously encrypted PM's before upgrading. ***


Enjoy!

Last edited by magnus; 22 Feb 2007 at 18:38.
Reply With Quote
  #22  
Old 22 Feb 2007, 19:01
magnus's Avatar
magnus magnus is offline
 
Join Date: Apr 2002
Originally Posted by valdet View Post
what about when a PM has an attachment.
vBulletin does not natively support attachments within Private Messages. Currently, the only way to achieve this result is via modification.

I develop my hacks to work on a default vBulletin installation and I cannot make any assurances as to their functionality alongside other hacks.

That being said, PMCrypt encrypts only the $pm['message'] variable. I'd imagine the Private Messages Attachments modification stores the attachments within the default attachments table, which remains unaffected by PMCrypt.
Reply With Quote
  #23  
Old 22 Feb 2007, 23:35
tansu's Avatar
tansu tansu is offline
 
Join Date: Apr 2006
Nice one, but how will user understand the encryption?
Reply With Quote
  #24  
Old 22 Feb 2007, 23:51
magnus's Avatar
magnus magnus is offline
 
Join Date: Apr 2002
The user doesn't need to understand anything other than his or her Private Messages are no longer stored in plaintext within the MySQL database. This modification does not require any user interaction whatsoever.
Reply With Quote
  #25  
Old 23 Feb 2007, 01:50
tansu's Avatar
tansu tansu is offline
 
Join Date: Apr 2006
Originally Posted by magnus View Post
his or her Private Messages are no longer stored in plaintext within the MySQL database.
OK, what I wanted to ask, how will they understand this?
Maybe a sign around the pm editor would be nice. "This message is encrypted" or something like that.
Because if you are a user who is suspicious about if admins are reading my pm's, my word of "your messages are encrypted" wont be enough..
Or I am completely misunderstanding somethings..
Reply With Quote
  #26  
Old 23 Feb 2007, 03:13
magnus's Avatar
magnus magnus is offline
 
Join Date: Apr 2002
Hrm, I see what you're saying. That's not a bad idea, I'll work up something visual for the end user.

Thanks for the suggestion.
Reply With Quote
  #27  
Old 23 Feb 2007, 14:13
TTG's Avatar
TTG TTG is offline
 
Join Date: May 2004
This could be more useful if it could be used per usergroup rather than all PM's
Reply With Quote
  #28  
Old 23 Feb 2007, 23:42
Mr.T Mr.T is offline
 
Join Date: Oct 2004
Hi i have a Problem ... The Hack works fine but :

I see them with Already answered Message for the second time it is answered in the Quot only the encoded text.

Sorry for my bad Englisch but I'm a German ^^

THX
Reply With Quote
  #29  
Old 23 Feb 2007, 23:50
UltimateOreo! UltimateOreo! is offline
 
Join Date: Nov 2006
Location: Missouri
Real name: Andrew Mendez
Do private messages even need an encryption? As far as i know, it is not possible to "steal" or even intercept private messages. Anyway, good idea as far as peace of mind goes.
Reply With Quote
  #30  
Old 24 Feb 2007, 00:06
magnus's Avatar
magnus magnus is offline
 
Join Date: Apr 2002
Originally Posted by Mr.T View Post
Hi i have a Problem ... The Hack works fine but :

I see them with Already answered Message for the second time it is answered in the Quot only the encoded text.

Sorry for my bad Englisch but I'm a German ^^

THX
I'm sorry, but I can't quite figure out what you're trying to describe. Would it be possible for you to take a screenshot of the problem?
Reply With Quote
Reply


Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 
Mod Options

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off


New To Site? Need Help?

All times are GMT. The time now is 10:18.

Layout Options | Width: Wide Color: