Go Back   vb.org Archive > vBulletin 3 Discussion > vB3 Programming Discussions
FAQ Community Calendar Today's Posts Search

Reply
 
Thread Tools Display Modes
  #1  
Old 10-04-2006, 03:35 AM
speedway's Avatar
speedway speedway is offline
 
Join Date: Nov 2001
Location: Sydney, Australia
Posts: 87
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default Another One - Different MD5 Hashes..

Howdy

I have been searching for an answer but nothing comes close to my problem. I am trying to login from another product, vbDrupal to be exact. Folks over there aren't sure what's going on so I thought I would ask on the VB side...

Basically vbDrupal uses the same operation to log into VB. The input from the login box is run through md5hash to produce the 2 required MD5 hashed variables, exactly the same as Vb does it. These values are then passed to the VB function verify_authentication thus:

Code:
    $login_result = verify_authentication($name, $pass, $pass_md5, $pass_md5_utf, $remember, true );
This is all well an good and the vars arrive in the VB function as expected. But the problem is that while processing this section:

Code:
            $vbulletin->userinfo['password'] != iif($password AND !$md5password, md5(md5($password) . $vbulletin->userinfo['salt']), '') AND
            $vbulletin->userinfo['password'] != iif($md5password, md5($md5password . $vbulletin->userinfo['salt']), '') AND
            $vbulletin->userinfo['password'] != iif($md5password_utf, md5($md5password_utf . $vbulletin->userinfo['salt']), '') )
2 different MD5 hashes are produced. When coming from a VB login, everything matches but when coming from a vbDrupal login they don't. In the following is print dumps of the vars in verify_authentication from 1. vbDrupal and 2. VB login script.

Code:
1. In verify_authentication U ********** | P | MD5 6a39c2f21e6aaa086eb504e92036c282 | MDF_UTF 6a39c2f21e6aaa086eb504e92036c282 | PWD w/SALT 0cb3a82320674097a32f49281932f449 | | MD5 w/SALT af15c389037bf36faafc61e5b5ab613f | | VB Password 7ae4ed232a0c3e5ef2181a62d61e47b4 | Passwords Don't Match

2. In verify_authentication U ********** | P | MD5 6a39c2f21e6aaa086eb504e92036c282 | MDF_UTF 6a39c2f21e6aaa086eb504e92036c282 | PWD w/SALT 46e9ff795cafb40480a34c72f10bbd62 | | MD5 w/SALT 7ae4ed232a0c3e5ef2181a62d61e47b4 | | VB Password 7ae4ed232a0c3e5ef2181a62d61e47b4 |
Can anyone suggest a reason that the resulting md5 hash would produce a different result with the exact same starting data? The final MD5 w/SALT values above should equal the VB Password hash, which only one does...

Hoping someone can help..

Cheers
Bruce
Reply With Quote
Reply


Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump


All times are GMT. The time now is 10:56 AM.


Powered by vBulletin® Version 3.8.12 by vBS
Copyright ©2000 - 2025, vBulletin Solutions Inc.
X vBulletin 3.8.12 by vBS Debug Information
  • Page Generation 0.03031 seconds
  • Memory Usage 2,159KB
  • Queries Executed 13 (?)
More Information
Template Usage:
  • (1)SHOWTHREAD
  • (1)ad_footer_end
  • (1)ad_footer_start
  • (1)ad_header_end
  • (1)ad_header_logo
  • (1)ad_navbar_below
  • (1)ad_showthread_beforeqr
  • (1)ad_showthread_firstpost
  • (1)ad_showthread_firstpost_sig
  • (1)ad_showthread_firstpost_start
  • (3)bbcode_code
  • (1)footer
  • (1)forumjump
  • (1)forumrules
  • (1)gobutton
  • (1)header
  • (1)headinclude
  • (1)navbar
  • (3)navbar_link
  • (120)option
  • (1)post_thanks_box
  • (1)post_thanks_button
  • (1)post_thanks_javascript
  • (1)post_thanks_navbar_search
  • (1)post_thanks_postbit_info
  • (1)postbit
  • (1)postbit_onlinestatus
  • (1)postbit_wrapper
  • (1)spacer_close
  • (1)spacer_open
  • (1)tagbit_wrapper 

Phrase Groups Available:
  • global
  • inlinemod
  • postbit
  • posting
  • reputationlevel
  • showthread
Included Files:
  • ./showthread.php
  • ./global.php
  • ./includes/init.php
  • ./includes/class_core.php
  • ./includes/config.php
  • ./includes/functions.php
  • ./includes/class_hook.php
  • ./includes/modsystem_functions.php
  • ./includes/functions_bigthree.php
  • ./includes/class_postbit.php
  • ./includes/class_bbcode.php
  • ./includes/functions_reputation.php
  • ./includes/functions_post_thanks.php 

Hooks Called:
  • init_startup
  • init_startup_session_setup_start
  • init_startup_session_setup_complete
  • cache_permissions
  • fetch_threadinfo_query
  • fetch_threadinfo
  • fetch_foruminfo
  • style_fetch
  • cache_templates
  • global_start
  • parse_templates
  • global_setup_complete
  • showthread_start
  • showthread_getinfo
  • forumjump
  • showthread_post_start
  • showthread_query_postids
  • showthread_query
  • bbcode_fetch_tags
  • bbcode_create
  • showthread_postbit_create
  • postbit_factory
  • postbit_display_start
  • post_thanks_function_post_thanks_off_start
  • post_thanks_function_post_thanks_off_end
  • post_thanks_function_fetch_thanks_start
  • post_thanks_function_fetch_thanks_end
  • post_thanks_function_thanked_already_start
  • post_thanks_function_thanked_already_end
  • fetch_musername
  • postbit_imicons
  • bbcode_parse_start
  • bbcode_parse_complete_precache
  • bbcode_parse_complete
  • postbit_display_complete
  • post_thanks_function_can_thank_this_post_start
  • tag_fetchbit_complete
  • forumrules
  • navbits
  • navbits_complete
  • showthread_complete