vb.org Archive

vb.org Archive (https://vborg.vbsupport.ru/index.php)
-   vB4 General Discussions (https://vborg.vbsupport.ru/forumdisplay.php?f=251)
-   -   VB4 Password Hashing Encryption (https://vborg.vbsupport.ru/showthread.php?t=252641)

dog199200 10-26-2010 09:02 AM
VB4 Password Hashing Encryption
 
Hello,

Does anyone know the hashing system for VB4's passwords??? I asked because i've been developing my own codes to sync the forum with my site and and accidently removed my password from my account... I found some hashing info in regards to VB3, and even got a password generated but it doesn't work. Here is the code I am currently using to 'hack/restore' my own password.

PHP Code:
<?
$conn = mysql_connect($DBhost, $DBuser, $DBpass) or die(mysql_error()); 
mysql_select_db($DBname) or die(mysql_error()); 

    if (isset($_POST[submit_modify])) {
    
        
        $salt = ' *My Salt* ';
        $password = $_POST[pass];

        $hash=MD5(MD5($password)+$salt);

        $update_profile = "UPDATE user
        SET password='".$hash."'
        WHERE userid=' *My User ID* '";
        
        
        
        $retval = mysql_query( $update_profile, $conn );
        if(! $retval ) {
            die('Could not update data: ' . mysql_error());
        }    
        
        echo "<center><b>Your Profile information has been updated!</b> <br />You will be redirected momentarily.</center><br />
        <script language=javascript>
            setTimeout(\"location.href='http://www.divineshadowsonline.com/index.php?area=profile'\", 2000);
        </script>";
        

    } else { ?>

<form method="post" action="<? echo $PHP_SELF;?>">
<input name="pass" type="password" size="15" />
<input type="submit" value="Update" name="submit_modify" />
</form>
    
    <? }
        
mysql_close($conn);
    ?>
it almost works, its just not creating the right hashing. I've been meaning to ask this question for a few days now cause I am also building my own verification system and want to have a user input a password to verify their account, then will check it against the already hashed password to match them up, etc. Any help is greatly appreciated

woodscooter 02-01-2011 07:50 AM
Hello dog,

You are nearly there, but not quite.

$salt = 'xyz'; You are showing leading and trailing spaces. Can't do that.
I assume you have found the correct salt from looking at the database.

$hash=MD5(MD5($password) . $salt); Concatenate the strings with a dot, not a +

$update_profile = "UPDATE user
SET password='$hash'
WHERE userid=99";

your '".$hash."' has way too many quotes and dots

your ' *My User ID* ' has spaces and does not need quotes if it's a plain number.

I have tried that query myself and I can assure you it works.

Alfa1 02-01-2011 09:18 PM
Why would you need to recreate your password if you can just request a new password from vbulletin?


All times are GMT. The time now is 02:45 AM.

Powered by vBulletin® Version 3.8.12 by vBS
Copyright ©2000 - 2025, vBulletin Solutions Inc.

X vBulletin 3.8.12 by vBS Debug Information
  • Page Generation 0.01086 seconds
  • Memory Usage 1,721KB
  • Queries Executed 10 (?)
More Information
Template Usage:
  • (1)ad_footer_end
  • (1)ad_footer_start
  • (1)ad_header_end
  • (1)ad_header_logo
  • (1)ad_navbar_below
  • (1)bbcode_php_printable
  • (1)footer
  • (1)gobutton
  • (1)header
  • (1)headinclude
  • (6)option
  • (1)post_thanks_navbar_search
  • (1)printthread
  • (3)printthreadbit
  • (1)spacer_close
  • (1)spacer_open 
Phrase Groups Available:
  • global
  • postbit
  • showthread
Included Files:
  • ./printthread.php
  • ./global.php
  • ./includes/init.php
  • ./includes/class_core.php
  • ./includes/config.php
  • ./includes/functions.php
  • ./includes/class_hook.php
  • ./includes/modsystem_functions.php
  • ./includes/class_bbcode_alt.php
  • ./includes/class_bbcode.php
  • ./includes/functions_bigthree.php 
Hooks Called:
  • init_startup
  • init_startup_session_setup_start
  • init_startup_session_setup_complete
  • cache_permissions
  • fetch_threadinfo_query
  • fetch_threadinfo
  • fetch_foruminfo
  • style_fetch
  • cache_templates
  • global_start
  • parse_templates
  • global_setup_complete
  • printthread_start
  • bbcode_fetch_tags
  • bbcode_create
  • bbcode_parse_start
  • bbcode_parse_complete_precache
  • bbcode_parse_complete
  • printthread_post
  • printthread_complete