Log in

View Full Version : is this possible??

Jacko
05-22-2003, 12:56 PM
vieiwing user passwords????

is this possible???

i know i can access them from the Database but can someone create me a form within admin CP to find by username then generate there password???
filburt1
05-22-2003, 01:24 PM
No.
Jacko
05-22-2003, 01:26 PM
fair enough answer.. :p
filburt1
05-22-2003, 01:28 PM
Well, it just isn't sanely possible. Search and ye shall find. :)
Jacko
05-22-2003, 01:39 PM
i thought they were encripted?? and 1 way too??
filburt1
05-22-2003, 02:00 PM
Not encrypted. Hashed, which means the only way to "unhash" them is via a brute force attack which can literally take years for some longer passwords.
Sebastian
05-22-2003, 08:16 PM
filburt is right., the passwords are encrypt via md5 hash .. one way encryption, therefor it can't be reversed and i think it will take a decade to even try to decrypt it.
assassingod
05-22-2003, 08:24 PM
A decade is slightly extreme (unless the user has a password with 40+ characters in it)

Atleast a month or longer for a standard password
filburt1
05-22-2003, 08:27 PM
Today at 05:16 PM Sebastian said this in Post #7 (https://vborg.vbsupport.ru/showthread.php?postid=398618#post398618)
filburt is right., the passwords are encrypt via md5 hash .. one way encryption, therefor it can't be reversed and i think it will take a decade to even try to decrypt it.

It is not encryption! It is a hashing algorithm! Big difference. :)

(I know Stefan or Chen has the same pet peeve ;))
Sebastian
05-22-2003, 08:31 PM
yeah, but i can't pronounce that word filburt ;)

assassingod, honeslty, it would take years even for the average 6 - 8 digit password. i read that somewhere at the php.net site.
filburt1
05-22-2003, 08:33 PM
Today at 05:24 PM assassingod said this in Post #8 (https://vborg.vbsupport.ru/showthread.php?postid=398620#post398620)
A decade is slightly extreme (unless the user has a password with 40+ characters in it)

Atleast a month or longer for a standard password

Either way, it'll take longer on average than PHP's default 30-second timeout ;)
assassingod
05-22-2003, 08:35 PM
Today at 10:31 PM Sebastian said this in Post #10 (https://vborg.vbsupport.ru/showthread.php?postid=398624#post398624)

assassingod, honeslty, it would take years even for the average 6 - 8 digit password. i read that somewhere at the php.net site.

True, but i'm talking about if you had a super-computer:p