Agreed, but instead of…
if (strlen($_POST[’name’]) < 100) {

It should be…
if($_POST['name'] != “” && strlen($_POST['name']) < 100){

This way we can at least make sure that some sort of name is applied. If $_POST['name'] != “” isn’t included, anyone can login to the chat without a name.

You don’t check the length of $_POST['name'].
An attacker can inject into the session any type of large content. (the size depends on post_max_size constant in php.ini)

So the attacker can take down your site with a nice dos:

while (true) {
start_a_new_session (eg. delete cookies)
post_a_large_content
}

Behalf the line

$_SESSION['name'] = stripslashes(htmlspecialchars($_POST['name']));

write eg.

if (strlen($_POST['name']) < 100) {
$_SESSION['name'] = stripslashes( htmlspecialchars( $_POST['name']));
}else{
die(’bad luck’);
}

or something similar.

thanks for this info

thanks