I presume vb_user is the vBulletin User table correct?
If so your query won't return no matches because you will first have to hash the password so you can compare them. Here is a quick outline of what you need to do:
- Connect to the Database
- Fetch the Username, Password and SALT
- Hash the input password and then hash it again with the salt.
- Compare the input password with the Password you fetch from the database
- Then do whatever you need to depending on the result.
With regards to your actual question, I don't think Passwords are case sensitive however I'm not too sure about Usernames but I think they are case-sensitve too.