View Full Version : Passwords in plaintext for user migration
Exeter
03-06-2015, 03:29 AM
Is there an easy way to get the passwords in plaintext out of the database of my VB4 install? I have DB access, obviously.
I am migrating to a custom login api. I need to get the passwords in plaintext, so I can re-encrypt them and insert them into the new system.
Is there any documentation for the VB4 login system?
--------------- Added 1425620464 at 1425620464 ---------------
Looks like my choices are to either use VB's algorithm along with the existing passwords in my new design, or ask the users to specify a new password when they log in.
ForceHSS
03-06-2015, 04:10 AM
Why not just upload them as they are into the new table
Exeter
03-06-2015, 05:55 AM
I'd have to use the exact same algorithm to encode and store the passwords in the DB. That's not necessarily a bad thing, but it limits my options in the new code.
ForceHSS
03-06-2015, 08:56 AM
The new system you are going to be using how does it differ from the old one? Is the tables different in any way
What is the point of hashing passwords when you can just "de-crypt" them back to plain-text?
No, that's not possible.
You have 2 options:
- You clone the password hashing function of vBulletin and additionally add your own hashing function on top of vBulletin.
- You use your own password hashing and reset the password of everyone
thetechgenius
03-06-2015, 07:19 PM
Like other people said, its impossible to de-hash/de-crypt an already encrypted vbulletin password. If this was easily possible, it would be a very major security issue in the vBulletin Software. When a hacker gain access to a server that running your forum, the first place he goes is MySQL to download a copy of your entire forum database. The hacker then has all Emails and Encrypted Passwords of your forum.
If it was possible to decrypt the passwords easily, most of those email accounts will also be hacked. Not including Facebook Accounts, Twitter, and the list goes on. Because a lot of people use the same password and email for everything in their life.
vBulletin® v3.8.12 by vBS, Copyright ©2000-2025, vBulletin Solutions Inc.