PDA

View Full Version : anyway to get vbulletin clear password?


harty83
12-13-2008, 03:24 PM
I want to create a hook that will log in to a Joomla installation once vBulletin authenticates the user.

Joomla will use the same username and password as vBulletin.

However, without developing a plugin for Joomla that will use the md5 hash of the password to directly authenticate the user (rather than a clear form of the password hashed during authentication), I can't find an easy way to do this.

So my question, does vBulletin pass a clear version of the password that can be used programmatically?

Thanks!
Alan

ZomgStuff
12-13-2008, 06:04 PM
No it does not, unless you wanted to add a hidden field to the login template and parse the un-hashed password, which would pose security risks.

harty83
12-13-2008, 06:31 PM
That's what I thought. (I actually like this security feature!)

Anyway, I was able to create a Joomla plugin that will make things work.

Thanks!
Alan

Dismounted
12-14-2008, 04:43 AM
The only time when vBulletin passes on a clear-text password over the internet is when the client does not have JavaScript enabled.

sysadm
01-22-2009, 05:37 PM
are you looking for DISABLE_PASSWORD_CLEARING setting?

Dismounted
01-23-2009, 03:05 AM
Again, that decreases security. In any case, the OP has found a solution already (see post #3).