[ Help ] The Algorithm used with md5 passwords

[RED_LINE]

Hello all,
iam working these days on php web application related to vBulletin , and so I needed to make a memberships system, But I don't want the visitors to register again .. ( I want to use the users registered in my forum )
So, i had some problems with the login system .. vBulletin doesn't use the usual md5 system .. I think it adds somethings to it .. i tried to figure out how it works .. but i couldn't really ..
so, please can anyone tell me how vBulletin trat the password since it's input by the user from the login box .. till it's stored in the database ?
and let's say .. that the user's password is aa .. and he is already typed it in the text-box .. and clicked the login button .. what steps will vBulletin take on the password to store it in the database ?

Thanks,

[tehste]

Hello all,
iam working these days on php web application related to vBulletin , and so I needed to make a memberships system, But I don't want the visitors to register again .. ( I want to use the users registered in my forum )
So, i had some problems with the login system .. vBulletin doesn't use the usual md5 system .. I think it adds somethings to it .. i tried to figure out how it works .. but i couldn't really ..
so, please can anyone tell me how vBulletin trat the password since it's input by the user from the login box .. till it's stored in the database ?
and let's say .. that the user's password is aa .. and he is already typed it in the text-box .. and clicked the login button .. what steps will vBulletin take on the password to store it in the database ?

Thanks,

no one really knows... It's one of the many great mysteries of vbulletin!

I heard somewhere that it does a bazillion MD5 to uber encrypt a password!

i swear i unticked quote message and it quoted it still :S

[Xenon]

well, it_s not difficutl:

md5(md5($password) . $vbulletin->userinfo['salt'])

just look into functions_login.php verify_authentication..

[RED_LINE]

So now way ? :tired:

ok .. just if i can use the vbuelltin functions to make the same steps on the password inputed by the user ..

I don't really care to know how it works .. I just need my script to work well !

Xenon :
Ok .. in fact I looked .. and Tried it

look this my phpmyadmin info :
http://img211.imageshack.us/img211/1975/xx9mi.jpg (http://imageshack.us)

my password on localhost is : aa
Iam using it sooo ok and it's aa Iam sure

so I wanted to see if this way iI found in the function would work or not .. :

echo md5(md5("aaU^8"));


and resulted :

a00e63216d20556fcd5ec5ec5cd5d9e3


as you can see .. it's not the same as the hash in phpmyadmin ..

thanks for trying to help

[Xenon]

of course, as this is the wrong code, it should be:

echo md5(md5("aa") . "U^8");

[RED_LINE]

Oops .. that wored

Thanks You :)

So, just if you have some time there .. what's the difference between what you wrote and what I've wrote .. ?

anyway .. Thanks ^_^

ooh .. I just now observed the difference ..

the salt is taken for the second md5 not the first ..

it's working so well .. thanks again

[Xenon]

you're welcome :)