vb.org Archive
Page 5 of 7 « First 34 5 67
Show 40 post(s) from this thread on one page

vb.org Archive (https://vborg.vbsupport.ru/index.php)
-   vBulletin 2.x Full Releases (https://vborg.vbsupport.ru/forumdisplay.php?f=4)
-   -   [release vb2] Database Password Encryption (https://vborg.vbsupport.ru/showthread.php?t=18868)

dabean 06-28-2001 04:19 PM
I had orginally planned on improving the hack to allow users to revert to plain text passwords, but forgot to post exactly how to do it. Yes md5 is indeed non-reversable but you can allways prompt for a new password. If anyone really wants the exact code to do this then I can post it.

jmcneese 06-28-2001 04:25 PM
yes, do post the code. i'm to lazy to figure it out myself. :D

dabean 06-28-2001 06:26 PM
first all you need to fix a little bug in hack.

In member.php Find
PHP Code:
  // validate old password
  if ($currentpassword!=$bbuserinfo[password]) {
    eval("standarderror(\"".gettemplate("error_wrongpassword")."\");");
    exit;
  } 
above it add
PHP Code:
  // secure password mod - encrypt password
  if ($bbuserinfo[encryptedpass]==1) {
    $currentpassword=md5($currentpassword);
  } // end secure password mod 

now for the actual improvement.

File: member.php

Find...
PHP Code:
  if ($newpassword!=$newpasswordconfirm) {
    eval("standarderror(\"".gettemplate("error_passwordmismatch")."\");");
    exit;
  }

  // secure passwords
  if ($bbuserinfo[encryptedpass]==1) {
    $newpassword=md5($newpassword);
  }
  // end secure passwords 
replace it with
PHP Code:
  if ($newpassword!=$newpasswordconfirm) {
    eval("standarderror(\"".gettemplate("error_passwordmismatch")."\");");
    exit;
  }

  // secure passwords
  if ($encryption=="off" && $bbuserinfo[encryptedpass]==1) {
    $DB_site->query("UPDATE user SET encryptedpass=0 WHERE userid='$bbuserinfo[userid]'");
  } else {
    if ($bbuserinfo[encryptedpass]==1) {
      $newpassword=md5($newpassword);
    }
  }
  // end secure passwords 

Find
PHP Code:
  // secure passwords
  if ($bbuserinfo[encryptedpass]==1) {
    // md5 hash password & store todo
    $cryptpassword=1;
    $urltoforward=""
  } else { 
Replace with
PHP Code:
  // secure passwords
  if ($bbuserinfo[encryptedpass]==1 && $cryptpassword==0) {
    // md5 hash password & store todo
    $cryptpassword=1;
    $downgradepass=1;
  } else { 
Find
PHP Code:
  } else {      
      $goto="usercp.php?s=$session[sessionhash]";
  } 
replace with
PHP Code:
  } else {         // secure passwords
    if($downgradepass!=1) {
      $goto="usercp.php?s=$session[sessionhash]";
    } else {
      $goto="member.php?s=$session[sessionhash]&action=editpassword&encryption=off";
    }
  }           // end secure passwords 
now for the templates

template modifypassword
below
<input type="hidden" name="s" value="$session[sessionhash]">

add
<input type="hidden" name="encryption" value="$encryption">

webhost 07-15-2001 02:05 PM
Is there anyway you can post a updated version of this hack in your first post of the thread. I saw where the last time you edited it was on the 5th I believe but I have seen on your last reply that you made changes on the 28th. Also does your zip also have Kevin's file in it?

dabean 07-15-2001 02:34 PM
Okay I've altered the zip to include the previous modifications and there is/was a table altering script included previously and currently so Kevin's file is no longer needed.

webhost 07-15-2001 02:42 PM
thanks

DarkReaper 07-18-2001 06:00 AM
Damn that took a while! finallty finished though and it works great, woo hoo! :D

rebby 07-18-2001 01:02 PM
Quote:
Originally posted by DarkReaper
Damn that took a while! finallty finished though and it works great, woo hoo! :D
yes, this hack is very slick... i can't wait until this is in the default install of vb...

rebby 07-31-2001 01:46 PM
i just upgraded to 2.0.3 and forgot about doing this hack :eek:

what changes might i need???

dabean 07-31-2001 01:50 PM
Not looked at 2.0.3 yet but nearly the whole hack would need reapplying. I'd guess.


All times are GMT. The time now is 12:48 AM.
Page 5 of 7 « First 34 5 67
Show 40 post(s) from this thread on one page

Powered by vBulletin® Version 3.8.12 by vBS
Copyright ©2000 - 2025, vBulletin Solutions Inc.

X vBulletin 3.8.12 by vBS Debug Information
  • Page Generation 0.01202 seconds
  • Memory Usage 1,759KB
  • Queries Executed 10 (?)
More Information
Template Usage:
  • (1)ad_footer_end
  • (1)ad_footer_start
  • (1)ad_header_end
  • (1)ad_header_logo
  • (1)ad_navbar_below
  • (8)bbcode_php_printable
  • (1)bbcode_quote_printable
  • (1)footer
  • (1)gobutton
  • (1)header
  • (1)headinclude
  • (6)option
  • (1)pagenav
  • (1)pagenav_curpage
  • (4)pagenav_pagelink
  • (1)post_thanks_navbar_search
  • (1)printthread
  • (10)printthreadbit
  • (1)spacer_close
  • (1)spacer_open 
Phrase Groups Available:
  • global
  • postbit
  • showthread
Included Files:
  • ./printthread.php
  • ./global.php
  • ./includes/init.php
  • ./includes/class_core.php
  • ./includes/config.php
  • ./includes/functions.php
  • ./includes/class_hook.php
  • ./includes/modsystem_functions.php
  • ./includes/class_bbcode_alt.php
  • ./includes/class_bbcode.php
  • ./includes/functions_bigthree.php 
Hooks Called:
  • init_startup
  • init_startup_session_setup_start
  • init_startup_session_setup_complete
  • cache_permissions
  • fetch_threadinfo_query
  • fetch_threadinfo
  • fetch_foruminfo
  • style_fetch
  • cache_templates
  • global_start
  • parse_templates
  • global_setup_complete
  • printthread_start
  • pagenav_page
  • pagenav_complete
  • bbcode_fetch_tags
  • bbcode_create
  • bbcode_parse_start
  • bbcode_parse_complete_precache
  • bbcode_parse_complete
  • printthread_post
  • printthread_complete