PDA

View Full Version : Custom authentication(which algorithm)


mkomenda
09-28-2015, 04:11 PM
Hello!
I wrote an application for VB4 that sends login data to the forum, then php script converts that input to the password stored in the users TABLE to check if it matches.

In VB4 I just had to use this algorithm to make comparison with the password in the user TABLE

md5(md5(PASSWORD) . SALT);

But I need to update to VB5 and I've seen that things look different in the database, in the user TABLE, there is no more password field, there's now TOKEN, SCHEME and SECRET.

What do I compare user input to in new VB5, TOKEN or SECRET? Or some combination of that.

If that's the case how VB5 genereates TOKEN or SECRET?

Can you please share algorithm VB5 uses for user login authentication.

Dave
09-28-2015, 04:53 PM
Check the file /core/libraries/password_compat/lib/password.php, I believe that's used for the password hashing in vB5.

Replicant
09-28-2015, 05:15 PM
David Grove did a write up on external logins for vb5.
Here's the link.

http://www.vbulletin.com/forum/blogs/david-grove/4327147-how-to-log-into-vbulletin-from-an-external-script-on-your-website

It explains alot on how the vb5 authentication process works.