No check for loading chatbox with other name

This is too vague (how do you change the query string?). I can't reproduce this bug.

Resetting to active. Maybe someone will investigate this in more detail.

Nicknames are set by GET and POST requests. I'll take suggestions to change this. Here is the name-setting code:

  if (isset($_GET['nickname']) && $_GET['nickname'] != '') {
    $nickname = $_GET['nickname'];
  }
  elseif (isset($_POST['nickname']) && $_POST['nickname'] != '') {
    $nickname = $_POST['nickname'];
  }
  else {
    srand(time());
    $nickname = $user->uid ? $user->name : t('Guest') . rand(100, 999);
  }

I modified the code to require users to use either there user name or a system-assigned guest name:

  // figure nickname
  if (isset($_GET['nickname']) && $_GET['nickname'] != '') {
    $nickname = $user->uid ? $user->name : $_GET['nickname'];
  }
  elseif (isset($_POST['nickname']) && $_POST['nickname'] != '') {
    $nickname = $user->uid ? $user->name : $_POST['nickname'];
  }
  else {
    srand(time());
    $nickname = $user->uid ? $user->name : t('Guest') . rand(100, 999);
  }

Fixed in DRUPAL-4-5, DRUPAL-4-6, DRUPAL-4-7, and HEAD.