[dog199200]

Anyways the only place for the password that I have seen is in includes/functions_login.php, lines 170-172

			$vbulletin->userinfo['password'] != iif($password AND !$md5password, md5(md5($password) . $vbulletin->userinfo['salt']), '') AND
			$vbulletin->userinfo['password'] != iif($md5password, md5($md5password . $vbulletin->userinfo['salt']), '') AND
			$vbulletin->userinfo['password'] != iif($md5password_utf, md5($md5password_utf . $vbulletin->userinfo['salt']), '')

yet if i edit the first line to remove the first md5, it says invalid login every time even after rerunning the hash.

using: http://www.insidepro.com/hashes.php?lang=eng to generate hash


I changed those lines of code to:

			$vbulletin->userinfo['password'] != iif($password AND !$md5password, md5($password), '') AND
			$vbulletin->userinfo['password'] != iif($md5password, md5($md5password), '') AND
			$vbulletin->userinfo['password'] != iif($md5password_utf, md5($md5password_utf), '')

and tested it all with the "testing" as the pass, hashed "ae2b1fca515949e5d54fb22b8ed95575"