Thank PPN, I have just completed hacks to change all the "md5"s to "crypt"s, while still allowing old md5 passwords to work... (total of 16 lines changed)
I found to my amusement that my php's crypt defaults to md5 passwords anyway! But that's ok, as vb should never be creating the encrypted form of the password. This is cool, as it would allow for a future change to md5 if required, but you need to make sure and pass whole encrypted password as "salt", not just the first two characters!
I now have two major things and one minor thing to do...
1. Figure out how to import users from my password file into the user table. Anybody got any sample code? (maybe I could use unix uids for vb user ids?)
2. Figure out how to update changed passwords (really easy one I figure out part 1.)
3. Minor hacking to block off or redirect password changing, etc... (have yet to figure out best way of doing this.)
Cheers!
|