View Full Version : Same password stored in DB shown in different ciphertext?
vicelover
03-14-2010, 02:42 AM
Version: VB 4.0.2
Same password stored in DB shown in different cipher text? It's so strange.
The same password should store as the same cipher text, how to make then same.
Please view the image below. All user are have the same password.
ForumsMods
03-14-2010, 02:57 AM
This is how vB encrypts passwords:
md5(md5(PASSWORD) . SALT)
vicelover
03-14-2010, 03:03 AM
This is how vB encrypts passwords:
md5(md5(PASSWORD) . SALT)
Thanks.
But I want to the same password store as the same in DB, no matter what kind of encryption method vB used.
Please see the image I posted, I set the user "test1" and "test2" have the same password, but their password stored differently in DB:"6748c3d89db4e0a2ed4415cd954f2606" and "b64edfc2807a3826aa7ac9b41ab45de1".
I want to find a solution to make them stored as the same in DB. Can you give more hints?
Regards.
raistlinthewiz
03-14-2010, 12:11 PM
So you can find out the passwords and use them for brute forcing the users email? oh noes...
Zachery
03-14-2010, 01:36 PM
It won't be wihtout modifing the code, which would make vb upgrades a pain. Learn how to use the salt for your own benifit.
vicelover
03-14-2010, 02:27 PM
It won't be wihtout modifing the code, which would make vb upgrades a pain. Learn how to use the salt for your own benifit.
Hi, Zachery, thanks for your advice.
I haven't consider that would make vb upgrades a pain.
I will find a new solution to solve my issue without change the encryption scheme of vb.
vBulletin® v3.8.12 by vBS, Copyright ©2000-2025, vBulletin Solutions Inc.