Encryption Info

[SupaJ]

Hello all..

I want to intergrate the registration from my site and the forums into one and I need to know how to encrypt the password for the forums, and what other things you need to know about the vbulletin registrar.

My site is coded in Coldfusion (.cfm)

Help is much, much appreciated.

[Andreas]

vB 3.5 Modifications How-Tos => Add User (automatically)

[SupaJ]

Thanks a lot.

But it still doesn't tell me how to encrypt the password.. Please help me, it's quite urgent.

[Andreas]

You don't have to "encrypt" it.
Just use the example Code shown and it will create the Users.

Anyway:
password = md5(md5('plaintextpassword') . 'salt')

[SupaJ]

I can't run PHP and Coldfusion on the same registration page though.

[Andreas]

Then use only PHP ;)

[SupaJ]

So there is no other way to do it with Coldfusion? I really need my forums and site integrated :(

[Andreas]

It is possible if Coldfusion can access mySQL (don't even know what Coldfusion is).
But you will have to create all the records manually.

[SupaJ]

But CF encrypts stuff in a 32bit format, PHP does it differently.

[Andreas]

I don't understand a word.
What does "CF encrypts stuff in a 32bit format" actually mean?

[SupaJ]

No idea but my coder told me to say it :D

Anybody else know?

[SupaJ]

Please PLEASE help!

[who is chris c]

if your running cf and cant run php then how are you running vb on the server. you may have to recode the way vb uses the password to conform with cf standards (i dont know cf at all)

[Andreas]

Please PLEASE help!
I've already posted everything that is necessary - now it is your turn.

[filburt1]

But CF encrypts stuff in a 32bit format, PHP does it differently.
vBulletin does not encrypt anything. The only information it doesn't preserve as plain text is the password, and that is hashed, not encrypted, using the MD5 algorithm: http://www.php.net/md5 . Virtually any language will have MD5 hashing functionality.

Encryption is two-way: text can be encrypted and then converted back to the original text. Hashing is one-way: the hashed text cannot be converted back to the original text because information is lost in the process. This has the disadvantage that two strings can create the same hash, but the chance of that happening is ridiculously low, something like one out of 16^16.

[Andreas]

Encryption is two-way
Not "really" if you are using a one-way function :)

[SupaJ]

<cfset hash1 = "#hash('lakisic1')# . salt">
<cfset hash2 = "#hash(hash1)# . ******">
<cfoutput>#hash(hash2)#</cfoutput>

That's what I tried. Any other ideas?