Things changed a bit I guess - but I'm pretty new to all this stuff:
Here is that the user class of the VB API does:
PHP Code:
$auth = vB_User::verifyAuthentication($username, $password, $md5password, $md5passwordutf);
if ( !$auth ) {
error_log('no valid creds');
}
else {
$res = vB_User::processNewLogin($auth, $logintype);
}
I guess you could write an extension that extends the user class.