Need assistance reading plain text password that user registers with
 

Hi all,

Here's an interesting problem.

Because of the requirements of this company I'm working for, whenever a user registers on our forum, it checks if the user already has a company account. If one doesn't exist, it creates a new account on a separate database. Account passwords on this database are plain text.

I have created a plugin at the hook point "register_addmember_complete".

The actual PHP code in register.php is using the variable $vbulletin->gpc['password']

When I try to call this variable from within my plug-in, it comes out blank.

e.g. $mypassword = $vbulletin->gpc['password'];
results in a blank $mypassword.

Does anyone know how I can get access to the plain text password that a user enters, from the "register_addmember_complete" hookpoint?

Best,

Leo

You'll have to do this:

... in your config.php. This is not set by default, which means the md5hash() javascript routine clears the clear text password form data so only the md5 version is sent over the wire. But you may define it yourself, as per this comment in global.php:

Although the comment is a little misleading, as it really applies to anywhere a password is submitted from the browser, like during registration or when changing passwords, not just on login.

Will you have to worry about syncronizing passwords between the corporate db and vB? i.e. if they change their vB password, will you need to update the corporate db, and vice versa? Or is it just a one off thing during registration?

-- hugh

Hugh,

Thanks! :)

Note: $vbulletin->gpc['password'] is still null, but $_POST['password'] is intact.

Cheers mate,

Leo

Do you mean $vbulletin->GPC['password']? Variable names are case sensitive. It should be OK, as it's included in the clean_array_gpc() call in the register code.

-- hugh

Haiz that was probably the problem!

Argh. Staring at this code too long....

L.