View Full Version : Remove md5 encryption
Hello,
I need to remove md5 password encryption from my forum.
What should I do?
Thanks.
I assume you mean from the passwords? You'd have to go in and find everywhere the function md5() is used to encrypt and to check passwords, and change the code. You'd also have to have everyone reset their password since there's no way to retrieve the password from the encrypted value.
If you just want to be able to do something with the plain text password when a user enters it to log in, then you just need to define DISABLE_PASSWORD_CLEARING in your config.php file.
squidsk
04-07-2013, 06:46 PM
A better question might be why would you want to remove password hashing, even if it is with an outdated hash function.
I want go in database and see plaintext password
--------------- Added 1365432988 at 1365432988 ---------------
It's not important where i see it but i need to see.
I thought that in register.php i can add a query to save it in a different table on my database but i don't know what should i write
squidsk
04-08-2013, 01:57 PM
What possible purpose would that serve? On top of that if the user accounts already exist there's no way, short of hacking the password, to get the plaintext password back from the md5 hash.
I'm actually more than a little suspicious of someone wanting to gain access to plaintext passwords when any relevant information on your forums is easily visible without the need to destroy security on the forum.
I don't want do decrypt my user's password but if it's possible save their plaintext password in db or in a file .html because i want that if they lost password i can send it the same
--------------- Added 1365435933 at 1365435933 ---------------
PROBLEM SOLVED. Anyway thank you
vBulletin® v3.8.12 by vBS, Copyright ©2000-2025, vBulletin Solutions Inc.