PDA

View Full Version : VB Passwords with other programs


Hiatus-
12-31-2012, 05:41 AM
Hello, I am currently coding a program and I want my website users to be able to use their forums information to log into the program. The problem I ran into was with the passwords. How would I correctly pull the passwords from the vb database to use in my program (the hash is what makes it difficult). Also I am programming in c#. Any help would be very appreciated.

Thanks.

Carnage
12-31-2012, 09:28 AM
you might find yourself better off using the mobile api

kh99
12-31-2012, 01:11 PM
In case it helps, what's stored in the vb user table password field is md5(md5(password) . salt)), where 'password' is the user's password and 'salt' is the value from the 'salt' field from the user table.

Hiatus-
12-31-2012, 02:17 PM
you might find yourself better off using the mobile api

what exactly do you mean by this?

--------------- Added 1356977681 at 1356977681 ---------------

Also, I got it working with the algorithm that kh posted. Thank you for the help

Carnage
01-01-2013, 11:09 AM
what exactly do you mean by this?

--------------- Added 1356977681 at 1356977681 ---------------

Also, I got it working with the algorithm that kh posted. Thank you for the help

Well, the C# program you are writing is external to the forums, ideally you wouldn't give it direct access to your vbulletin database. If you use the API that the mobile apps use you will have a more secure way to authenticate a user against your forum's database.

If you intend to distribute the program to anyone if it has direct access to the database, it will present a massive security issue. (Somewhere the program will need your database credentials, allowing a malicious user to obtain them from it)