md5(md5(password)) --> md5(password)
 

Is there any hack that turn the complicated authentication into just md5(password) + salt. I want to validate my member against mod_auth_mysql which only take md5(password) + salt.

vBulleting Support tell me that some body outthere already made this modification. If you have any idea, please let me know.

Thanks for any suggestion

p.s. I also posted in vb2 forum. sorry wrong forum.

I solved the problem myself.

Instead of modify vb code, I modified mod_auth_mysql.c to meet the requirement of vb authentication algorithm.

For those interested, here is the code:
note: this for for mod_auth_mysql.c version 2.9.0. I don't know any other mod. I am very happy of my first ever achievement. I completed this modification within 1 hr w/o much knowledge of vb and c programing. I bought vBulletin 2 days ago :smoke: and never use any forum before. The completed source code is attached.

Repalce this:
with this:
Replace this:
with this:

Nice Job. Here's the version for vB 3.6.4 on RedHat ES 4 (mod_auth_mysql-2.6.1):

867c867,868
< if (encryption_type == PW_ENCRYPT_CRYPT && /* Salt is only for crypt'd passwords */
---
> if ((encryption_type == PW_ENCRYPT_CRYPT || /* Salt is only for crypt'd passwords */
> encryption_type == PW_ENCRYPT_MD5) && /* or MD5 */
902c903
< if(strcmp(real_pw,ap_md5(r->pool, (const unsigned char *) sent_pw)) == 0) {
---
> if(strcmp(real_pw,ap_md5(r->pool, strcat(ap_md5(r->pool,(const unsigned char *) sent_pw),salt))) == 0) {
904a906,916
> else if(strcmp(real_pw,ap_md5(r->pool, (const unsigned char *) sent_pw)) == 0) {
> passwords_match = 1;
> }

Bump for a good job. I made the code changes in the first post to version 3.0.0, and it works. Thanks much!!!
2 years old, and still good info!