Every message sent is stored in a sqlite database so that the recipient can read it. Other than that there are no message logs at all. Only the proper recipient is allowed to view the message. So if somebody sends a message to you, then you are the only person who gets to read that message.

I think you're right about the phrasing with regard to the password. I'll change that next time I work on the system.

Hmm... delete is important. I'll add that tomorrow night. Right now it's 4am and I'm falling asleep. Thanks for the suggestion.

Good job on this PM thingy! I like.

This is one of the main reasons I had behind making the system. Basically, nobody gets to read a message other than the intended recipient. So there's no way for anyone without database access to harvest redemption codes.

If you're asking if you can trust me personally not to scour the database looking for codes - well, I promise I won't ever do anything like that.

Nice! Works fine.

Or you can just sha-1 the plaintext before saving it in the db and decrypt it when showing it to the user.

Great idea, and thanks, Barefoot_Monkey!

Niiiiice. Thanks, Barefoot_Monkey!

Not working anymore for me, looks like the site is down.

It seems to lock up when trying to send a message to someone who hasn't signed up yet (I was kinda hoping I could send a message so it'd be waiting for them when/if they do sign up).

Either that, or it's just really slow overall.

Pretty pointy.. It's going to cause a lot of damage.

Hey cool, thanks for creating this system!

Nice work barefoot ;)

Great job, Barefoot_Monkey. I do hope GOG get their act together and add PMs soon, but this is probably the best solution in the meantime.

Great job, now for a way to get everyone to sign up or have messages waiting for unregistered users.

Thank you for all the positive responses It's very encouraging :-)

It's just being slow. I got a notice from my hosting provider saying that they are experiencing extremely high load at the moment. (not from us - it's a shared environment and the load is coming from someone using mysql). Hopefully it will clear up soon.

You can actually send messages to people who haven't signed up up yet. It shows you a warning before you try to write the message, but the message stills goes through and the recipient will get the message when he eventually does sign up.

So you can send a message to xxxxxx, see that he hasn't registered his account yet but send the message anyway, and then post a message on GOG telling xxxxxx that he has a PM waiting for him on GogPM and that he really should join.