PM's you can read PM's sent if you change the url to another members id, this whole pm system needs to be secure, even though you dont know the names, you can read them and work out who they are by their writing styles.

unread messages in ray im and others, can be read via the database, they should be encrypted as they are private and personal, so no need for a webmaster to have access to the messages in the clear, its the same as passwords in the clear,

Ray chat, admin should have the choice see more to enter the chat in either visible or invisible mode to see trouble makers