It works in vB 3.6.0 as well. There was only a minor change in the instructions. In the 3.6.0 code they added ?do=login after login.php. Simply change the instructions for modifying adminfunctions.php as follows:
In incudes/adminfunctions.php
Find:
--------------------------------------
Code:
<form action="../login.php?do=login" method="post" name="loginform" onsubmit="md5hash(vb_login_password, vb_login_md5password, vb_login_md5password_utf); js_do_options(this)">
--------------------------------------
REPLACE it with:
--------------------------------------
Code:
<?php
if ($logintype=='cplogin' OR $logintype=='modcplogin')
{
echo '<form action="../login.php?do=login" method="post" name="loginform" onsubmit="document.forms.loginform.vbpassword.value=document.forms.loginform.vb_login_password.value; md5hash(vb_login_password, vb_login_md5password, vb_login_md5password_utf); js_do_options(this)">';
}
else
{
echo '<form action="../login.php?do=login" method="post" name="loginform" onsubmit="md5hash(vb_login_password, vb_login_md5password, vb_login_md5password_utf); js_do_options(this)">';
}
?>
--------------------------------------
Find:
--------------------------------------
Code:
<input type="hidden" name="vb_login_md5password_utf" value="" />
--------------------------------------
BELOW it add:
--------------------------------------
Code:
<input type="hidden" name="vbpassword" value="" />
All of the instructions for the login.php edits did not change. Great hack!