Security with integration with Joomla

[morcth]

Hello,

There is a plugin for FireFox called tamper data that lets you manipulate all POST parameters sent in the browser.

If the chatroom is integrated into a CMS like Joomla, is it possible that someone using this plugin can change their username to someone elses before they login. I tried it a bit a few days ago and it didnt look like it could work but I am not too killed with that so not sure.

Using tamper data does it take away a bunch of security because people can tamper with post parameters?

Is there a way to hardcode into the script to get the username value instead of sending everything in parameters? Thanks for any info.

Josh

[phpfreechat]

Is there a way to hardcode into the script to get the username value instead of sending everything in parameters?

Yes, just use :
$params['nick'] = $yournicknamecomingfromyourdatabase;