[georges]

I have people registered on my Bulletin Board for an online course. Depending on their progress, I wish to allow access to directories on my server. That is, when they finish Workbook 2, I allow them access to Workbook3. Access rights are given automatically and access is achieved is via their VBulletin password using an access.users file under Apache. The members do not have accounts on my server.

It used to work until the new version of VBulletin started to encrypt passwords (MB5+salt+Mb5). I was hoping to disable this feature.

This is a major problem for me, as the course starts this week, and I only discovered the problem.

So

1. Members register password
2. VBulletin hashes it
3. My php script extracts the password and makes an access.users file
4. Apache encrypts the passwords
5. Member goes to access the restricted directory, and is requested to type in their password.
6. Apache encrypts their response and compares it with the access.users file -- Mismatch!!!
7. My neat little system falls over.

Can you help?

AG :nervous: