vb.org Archive

vb.org Archive (https://vborg.vbsupport.ru/index.php)
-   vB3 General Discussions (https://vborg.vbsupport.ru/forumdisplay.php?f=111)
-   -   VB passwords (MD5 with Salt)? (https://vborg.vbsupport.ru/showthread.php?t=70650)

paulmon 10-16-2004 01:45 AM

VB passwords (MD5 with Salt)?
 
I'm going to be importing my user database from Geeklog as I'm switching from GL to VB with VBA. Geeklog stores it's password as an MD5. From what I've read here so does VB with the difference that VB uses a SALT as well. Is there any way for me to import the passwords from Geeklog (as it doesn't use a salt) or am I out of luck? I really don't want my users to have to go through the hassle of doing a forgotten password recovery.

Help, anyone...

Cheers,

Paul

Zachery 10-16-2004 02:16 AM

Quote:

Originally Posted by paulmon
I'm going to be importing my user database from Geeklog as I'm switching from GL to VB with VBA. Geeklog stores it's password as an MD5. From what I've read here so does VB with the difference that VB uses a SALT as well. Is there any way for me to import the passwords from Geeklog (as it doesn't use a salt) or am I out of luck? I really don't want my users to have to go through the hassle of doing a forgotten password recovery.

Help, anyone...

Cheers,

Paul

Have you tried looking at how impex works and modifiying it to your own needs? there are API docs.

paulmon 10-16-2004 11:56 AM

Quote:

Originally Posted by Zachery
Have you tried looking at how impex works and modifiying it to your own needs? there are API docs.

Yeah, that's what I was going to be looking at; however I just noticed the difference in the way passwords were handled and thought I'd ask. :)

Paul

Andreas 10-16-2004 12:40 PM

The passwords of VB3 are stored in the database as md5(md5('plaintext_password') + salt).

You already got md5('plaintext-password') from your geeklog database.
So the only thing you have to do is generate a random sort, then concatenate the existing hash with this salt, hash it again and you're done.

paulmon 10-17-2004 12:49 AM

Quote:

Originally Posted by KirbyDE
The passwords of VB3 are stored in the database as md5(md5('plaintext_password') + salt).

You already got md5('plaintext-password') from your geeklog database.
So the only thing you have to do is generate a random sort, then concatenate the existing hash with this salt, hash it again and you're done.

Thanks KirbyDE, that worked a charm.

Paul


All times are GMT. The time now is 11:12 PM.

Powered by vBulletin® Version 3.8.12 by vBS
Copyright ©2000 - 2025, vBulletin Solutions Inc.

X vBulletin 3.8.12 by vBS Debug Information
  • Page Generation 0.01162 seconds
  • Memory Usage 1,717KB
  • Queries Executed 10 (?)
More Information
Template Usage:
  • (1)ad_footer_end
  • (1)ad_footer_start
  • (1)ad_header_end
  • (1)ad_header_logo
  • (1)ad_navbar_below
  • (3)bbcode_quote_printable
  • (1)footer
  • (1)gobutton
  • (1)header
  • (1)headinclude
  • (6)option
  • (1)post_thanks_navbar_search
  • (1)printthread
  • (5)printthreadbit
  • (1)spacer_close
  • (1)spacer_open 

Phrase Groups Available:
  • global
  • postbit
  • showthread
Included Files:
  • ./printthread.php
  • ./global.php
  • ./includes/init.php
  • ./includes/class_core.php
  • ./includes/config.php
  • ./includes/functions.php
  • ./includes/class_hook.php
  • ./includes/modsystem_functions.php
  • ./includes/class_bbcode_alt.php
  • ./includes/class_bbcode.php
  • ./includes/functions_bigthree.php 

Hooks Called:
  • init_startup
  • init_startup_session_setup_start
  • init_startup_session_setup_complete
  • cache_permissions
  • fetch_threadinfo_query
  • fetch_threadinfo
  • fetch_foruminfo
  • style_fetch
  • cache_templates
  • global_start
  • parse_templates
  • global_setup_complete
  • printthread_start
  • bbcode_fetch_tags
  • bbcode_create
  • bbcode_parse_start
  • bbcode_parse_complete_precache
  • bbcode_parse_complete
  • printthread_post
  • printthread_complete