Security Best Practices

Security should be a top priority for any web application handling user data and communications. This section outlines essential security measures for your ChatNet installation including changing default secret keys, enforcing SSL/HTTPS, setting strong passwords, securing your database, configuring file upload restrictions, and implementing regular backups. Following these practices helps protect your platform and users from common security threats.

Changing Default Secret Keys

Edit config/init.php:

// Change this to a unique random string define('SECRET_KEY', 'your-unique-random-string-here');

Generate a secure key:

echo bin2hex(random_bytes(32));

SSL/HTTPS Enforcement

Secure all communications by enabling HTTPS on your server.

1. Obtain an SSL certificate (Let's Encrypt is free)
2. Configure your web server for HTTPS
3. Add redirect from HTTP to HTTPS
4. Update site URL in admin to use https://

Strong Admin Passwords

Use strong, unique passwords for all administrator accounts.

• Minimum 12 characters
• Mix of uppercase, lowercase, numbers, symbols
• Never reuse passwords
• Consider a password manager

Database Security

Protect your database from unauthorized access.

1. Use a strong database password
2. Limit database user permissions
3. Don't use root for production
4. Keep database on localhost when possible

File Upload Restrictions

In Chat & Features > Chat Settings:

• Set appropriate file size limits
• Restrict allowed file types
• Enable virus scanning if available

Regular Backups

See the Backup & Maintenance section for details.

IP Logging & Blacklist

Navigate to Moderation > IP Access

IP logging and blacklisting help protect your platform from malicious users, spam bots, and repeated abuse.

Enabling IP Logging

Viewing IP Logs

1. Navigate to Reports > IP Logs
2. View logged activities by IP address
3. Filter by action type (login, register, etc.)
4. Identify suspicious patterns

Blocking IP Addresses

1. Navigate to Moderation > IP Access
2. Click "Add IP"
3. Enter the IP address to block
4. Optionally add a reason/note
5. Save

Blocked IPs will be denied access to the entire platform.

IP Blacklist Best Practices

• Block IPs showing repeated abuse
• Use CIDR notation for ranges (e.g., 192.168.1.0/24)
• Document why each IP was blocked
• Periodically review and clean up old entries
• Consider using a firewall for large-scale blocking

Domain Filter

Navigate to Moderation > Domain Filter

The domain filter controls which URLs and links can be shared in chat messages, helping prevent spam and malicious links.

Filter Modes

Configuring Domain Filter

1. Navigate to Moderation > Domain Filter
2. Choose filter mode (whitelist or blacklist)
3. Add domains to the list
4. Save changes

Adding Domains

Enter domains without http:// or www:

example.com trusted-site.org your-company.com

Whitelist Mode (Recommended for Strict Control)

Only links from these domains will be allowed:

• Your own domain
• Trusted partner sites
• Approved image hosts

All other links will be blocked or stripped from messages.

Blacklist Mode

Links from these domains will be blocked:

• Known spam sites
• Malware distributors
• Competitor sites (optional)

All other links will be allowed.

What Happens to Blocked Links

Depending on configuration:

• Links may be removed from messages
• Messages with links may be blocked entirely
• Users may receive a warning

Additional Security Measures

Extra steps to further harden your ChatNet installation.

• Keep PHP and server software updated
• Use a Web Application Firewall (WAF)
• Monitor access logs for suspicious activity
• Implement rate limiting
• Regular security audits