PDA

View Full Version : what hash does vBulletin's use for passwords?


king98
07-03-2006, 12:00 PM
Hello,

I'm trying to integrate a php script with vBulletin's user. I tried to use this algorithem:
md5(md5($_POST['password']).$row['salt'])
to convert the password that is entered by the member to match the password that is stored in vBulletin.user table but that algorithem gave defferent hash from the one stored in the DB.

does any one guys know how to integrate the login process with a nonvBulletin script?

Adrian Schneider
07-03-2006, 03:00 PM
The above is correct.

md5(md5('actualPassword') . $salt);

Did you query for the salt value? It's stored in the user table as well.

king98
07-04-2006, 09:05 PM
yes, that is what I did.

I wrote a query to get the stored password & salt for the entered username then I compared the the stored password with the value of md5(md5($_POST['password']).$row['salt']) but they did not match.

Paul M
07-04-2006, 09:41 PM
I suggest you post all your code (not just the one line).