I own a chat room and some users use a program Winsock Packet Editor, "WPE PRO".

With it they manage to bypass chat rules, like they can't be muted or kicked, and they can send messages fast bypassing the limit of the chat.

I was wondering if there is a way to end this?

About the software from the developer website:


  Winsock Packet Editor (WPE) Pro is a packet sniffing/editing tool which is generally used to hack multiplayer games. WPE Pro allows modification of data at TCP level. Using WPE Pro one can select a running process from the memory and modify the data sent by it before it reaches the destination. It can record packets from specific processes, then analyze the information. You can setup filters to modify the packets or even send them when you want in different intervals. WPE Pro could also be a useful tool for testing thick client applications or web applications which use applets to establish socket connections on non http ports.  


Update:
Its called 123flashchat, its Java/Flash, unfortunately the company abandoned the project, no updates or fixes any more. and the issue is not kicking the user, there is a ban on the ip, but a user can change the ip and return and start spamming messages fast  

If what you describe is true, your chat room is designed badly.

The view of the server and what packets it receives should be forwarded to other users should be independent from whatever packets are coming in or going out.

Manipulating the traffic on a client should only interfere with that client's view of the chat room, never with other clients.

If you designed that differently, you are trusting on the clients to behave correctly.

You should never do that.

Misbehaving clients (those not behaving according to your rules) may create even bigger problems for you than people not being kicked. Here are a few examples of things that may happen without proper input validation:


Users may impersonate other users, leading to massive trust and confidentiality breaches
Users may gain rights they otherwise wouldn't have, being able to hold your service for ransom


Side note here:

There are many web clients for IRC that are easy to deploy and many IRC networks that let you host channels for free. Have your pick and rely on a thorough platform for chats.
