User Atuh Check?

[Spybot S&D]

Well, I was working on a program (in vb.net). I was trying to make the program check to see if you have 100 posts before it loads up, and if you don't, it shuts down.

What I tried to get it to do, was login to my VBull site, go to the member's profile, and check the required posts.

This is the login url I tried:
http://templeofwarcraft.net/forum/login.php?do=login&vb_login_username=USERNAME&vb_login_password=PASSWORD

I was wondering how I could go about doing this? That URL will NOT log me in :(

I was also wondering of there was some sort of midification for vbull that would act as an authorization system? There is one for phpbb.


Thanks,
Alex

[MoT3rror]

vBulletin uses POST to submit values to the login page. You will have to use post not get.

[Spybot S&D]

I've used post and get commands, neither worked.

[Dismounted]

Login with a browser and catch what is being sent. I think you will find that the password will be sent MD5 encrypted :).

[Spybot S&D]

I've done this before without encrypting it, and it worked :P

But if you can get me the login string and the encryption meathos (single md5?) , I can make it hash the strings, then send it :)

[Opserty]

The password encryption has been asked many times in this forum do a search for it. (Hint: Search for "Password Hash")

[Dismounted]

Usually:
Client -> Password is MD5 hashed (once) using JS -> Password sent to server -> Script adds salt and hashes MD5 again.

[Spybot S&D]

Ok. My friend Ricky made a HTTP Wrapper for vb.net. It supports post and get commands. I want to check to see if it logged in or not. What url would I use to login?

example:

mysite.com/login.php?username=Alex&password=Bob

thanks,
Alex

[Dismounted]

As said before, vBulletin uses POST to send information. Last time I went into that [art of the code, I believe it even rejects any logins using GET.

[Spybot S&D]

I just said, I could use post.. And I will. The question i'm wondering is the URL I need to know to send the post data.

[shovel]

Using a GET request to pull the data is a bit vulnerable. It'll open the site to attackers slowly but surely. POST is commonly used for situations like this. Why does it have to be GET, I'm just wondering?

[Spybot S&D]

It dosn't have to be get! I can use post data :D

Here is the function in vb.net

HTML = wrapper.post("URL", "Post Data", "Referrer")

[MoT3rror]

You can find the login code in this mod (https://vborg.vbsupport.ru/showthread.php?t=132996) or your navbar template.

[Spybot S&D]

Well, In that mod, it requests some values from Vbull. Like md5 stuff. Could someone just show me how to make anyhting login in vb.net?

Thanks!