vb.org Archive

vb.org Archive (https://vborg.vbsupport.ru/index.php)
-   vB3 General Discussions (https://vborg.vbsupport.ru/forumdisplay.php?f=111)
-   -   Display User's current password in user control panel. (https://vborg.vbsupport.ru/showthread.php?t=172424)

desizsports 03-08-2008 07:41 AM

Display User's current password in user control panel.
 
I need to display user's current password in their control panel. Is it possible ?

snakes1100 03-08-2008 08:30 AM

Thats a very BAD idea.

desizsports 03-08-2008 08:57 AM

Join Date: Dec 2001 :- I will have to trust you on this.

The thing is that I am working on making a link for the user that is something like :-

http://user@pass:ip.com

Is there any alternatives to do this other than user putting the information manually ?

snakes1100 03-08-2008 10:08 AM

vb uses md5 hash + salt

Boofo 03-08-2008 10:10 AM

It can be done but is not advisable.

Marco van Herwaarden 03-10-2008 09:47 AM

This can not be done without major concessions to security.

phantom15 03-16-2008 10:15 AM

I am also wanting to do this, I have sent a PM to Marco van Herwaarden for guidence

I am also trying to achieve that same thing as desizsports

Marco van Herwaarden 03-16-2008 11:09 AM

Viewing the current passwords of members is impossible as they are not available in plain text.

You could setup vB to also sent the unencrypted passwords, but sending unencrypted passwords over the internet, is a huge security vulnerability. Once the unencrypted passwords are sent to the server, you could catch the variable and store it in a new database column.

to enable sending unencrypted passwords, add the following line to your config.php:

PHP Code:

define('DISABLE_PASSWORD_CLEARING'true); 


phantom15 03-16-2008 11:15 AM

I dont quite understand, I just have to add that code and I will be able to view it on the server?

Soory for being an idiot

Paul M 03-16-2008 11:28 AM

Quote:

Originally Posted by phantom15 (Post 1466039)
I dont quite understand, I just have to add that code and I will be able to view it on the server?

No.

In simple terms - by default, when a user registers in vb an encrypted version of their password is sent to the server and stored in the database. You can enable vb to send the unencrypted version instead (which will happen for NEW registrations only). There is no way to ever view the passwords of existing users as they will already be encrypted.

To repeat earlier people - doing this is an incredibly stupid idea as its a major security risk.


All times are GMT. The time now is 04:25 AM.

Powered by vBulletin® Version 3.8.12 by vBS
Copyright ©2000 - 2025, vBulletin Solutions Inc.

X vBulletin 3.8.12 by vBS Debug Information
  • Page Generation 0.01213 seconds
  • Memory Usage 1,729KB
  • Queries Executed 10 (?)
More Information
Template Usage:
  • (1)ad_footer_end
  • (1)ad_footer_start
  • (1)ad_header_end
  • (1)ad_header_logo
  • (1)ad_navbar_below
  • (1)bbcode_php_printable
  • (1)bbcode_quote_printable
  • (1)footer
  • (1)gobutton
  • (1)header
  • (1)headinclude
  • (6)option
  • (1)pagenav
  • (1)pagenav_curpage
  • (1)pagenav_pagelink
  • (1)post_thanks_navbar_search
  • (1)printthread
  • (10)printthreadbit
  • (1)spacer_close
  • (1)spacer_open 

Phrase Groups Available:
  • global
  • postbit
  • showthread
Included Files:
  • ./printthread.php
  • ./global.php
  • ./includes/init.php
  • ./includes/class_core.php
  • ./includes/config.php
  • ./includes/functions.php
  • ./includes/class_hook.php
  • ./includes/modsystem_functions.php
  • ./includes/class_bbcode_alt.php
  • ./includes/class_bbcode.php
  • ./includes/functions_bigthree.php 

Hooks Called:
  • init_startup
  • init_startup_session_setup_start
  • init_startup_session_setup_complete
  • cache_permissions
  • fetch_threadinfo_query
  • fetch_threadinfo
  • fetch_foruminfo
  • style_fetch
  • cache_templates
  • global_start
  • parse_templates
  • global_setup_complete
  • printthread_start
  • pagenav_page
  • pagenav_complete
  • bbcode_fetch_tags
  • bbcode_create
  • bbcode_parse_start
  • bbcode_parse_complete_precache
  • bbcode_parse_complete
  • printthread_post
  • printthread_complete