vb.org Archive - Same password stored in DB shown in different ciphertext?

vb.org Archive (https://vborg.vbsupport.ru/index.php)

- vB4 Programming Discussions (https://vborg.vbsupport.ru/forumdisplay.php?f=252)

- - Same password stored in DB shown in different ciphertext? (https://vborg.vbsupport.ru/showthread.php?t=238214)

vicelover

03-14-2010 02:42 AM

Same password stored in DB shown in different ciphertext?

1 Attachment(s)

Version: VB 4.0.2

Same password stored in DB shown in different cipher text? It's so strange.

The same password should store as the same cipher text, how to make then same.

Please view the image below. All user are have the same password.

ForumsMods

03-14-2010 02:57 AM

This is how vB encrypts passwords:

Code:

md5(md5(PASSWORD) . SALT)

vicelover

03-14-2010 03:03 AM

Quote:

Originally Posted by vB Style (Post 2003211)

This is how vB encrypts passwords:

Code:

md5(md5(PASSWORD) . SALT)

Thanks.

But I want to the same password store as the same in DB, no matter what kind of encryption method vB used.

Please see the image I posted, I set the user "test1" and "test2" have the same password, but their password stored differently in DB:"6748c3d89db4e0a2ed4415cd954f2606" and "b64edfc2807a3826aa7ac9b41ab45de1".

I want to find a solution to make them stored as the same in DB. Can you give more hints?

Regards.

raistlinthewiz

03-14-2010 12:11 PM

So you can find out the passwords and use them for brute forcing the users email? oh noes...

Zachery

03-14-2010 01:36 PM

It won't be wihtout modifing the code, which would make vb upgrades a pain. Learn how to use the salt for your own benifit.

vicelover

03-14-2010 02:27 PM

Quote:

Originally Posted by Zachery (Post 2003405)

It won't be wihtout modifing the code, which would make vb upgrades a pain. Learn how to use the salt for your own benifit.

Hi, Zachery, thanks for your advice.

I haven't consider that would make vb upgrades a pain.

I will find a new solution to solve my issue without change the encryption scheme of vb.

All times are GMT. The time now is 04:54 PM.

X vBulletin 3.8.12 by vBS Debug Information
Page Generation 0.00951 seconds Memory Usage 1,720KB Queries Executed 10 (?)
More Information
Template Usage: (1)ad_footer_end (1)ad_footer_start (1)ad_header_end (1)ad_header_logo (1)ad_navbar_below (2)bbcode_code_printable (2)bbcode_quote_printable (1)footer (1)gobutton (1)header (1)headinclude (6)option (1)post_thanks_navbar_search (1)printthread (6)printthreadbit (1)spacer_close (1)spacer_open Phrase Groups Available: global postbit showthread	Included Files: ./printthread.php ./global.php ./includes/init.php ./includes/class_core.php ./includes/config.php ./includes/functions.php ./includes/class_hook.php ./includes/modsystem_functions.php ./includes/class_bbcode_alt.php ./includes/class_bbcode.php ./includes/functions_bigthree.php Hooks Called: init_startup init_startup_session_setup_start init_startup_session_setup_complete cache_permissions fetch_threadinfo_query fetch_threadinfo fetch_foruminfo style_fetch cache_templates global_start parse_templates global_setup_complete printthread_start bbcode_fetch_tags bbcode_create bbcode_parse_start bbcode_parse_complete_precache bbcode_parse_complete printthread_post printthread_complete
Messages: