Go Back   vb.org Archive > vBulletin 3 Discussion > vB3 General Discussions
FAQ Community Calendar Today's Posts Search

Reply
 
Thread Tools Display Modes
  #1  
Old 03-23-2007, 09:21 PM
wh005h wh005h is offline
 
Join Date: Jun 2006
Location: Texas
Posts: 7
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default Removing/Changing MD5 on Passwords

Here's my problem:
I have a a server that reads md5 and regular passwords. The problem I'm having is Vbulletin encrypts the passwords differently than the server and they don't sync up as the same hash.
I need to either: 1. Remove the md5 encryption entirely or 2. change it to the same thing. I'm seeing removing it as an easier thing to do lol

The md5 for the server works fine and dandy by just putting md5 infront of the password post on insertion. Vbulletin seems to go a little beyond just that lol.
Either that or I have absolutely no idea what I'm talking about and it's something totally different ¬_¬

**Edit**
Okay after reading some more I found that out that I need to remove the "salt" from the hash to keep it as the hash of just the password. Anyone know how to do that? I would really appreciate it ^_^

**Edit2**
Okay read some more... I just need it to be just md5(password) lol no salts or double md5
I've found incomplete guides most of which don't even do half of what they say lol
Reply With Quote
  #2  
Old 03-24-2007, 08:14 AM
Marco van Herwaarden Marco van Herwaarden is offline
 
Join Date: Jul 2004
Posts: 25,415
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

What are you trying to achieve? What got vBulletin password hashes and a server to do with eachother?
Reply With Quote
  #3  
Old 03-27-2007, 05:07 AM
wh005h wh005h is offline
 
Join Date: Jun 2006
Location: Texas
Posts: 7
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

Heh sorry for the late reply, I figured no one would reply.
They will both be used by the same community? lol
Rather than registering on the forums and server why not just put it all into the forums.
I kinda gave up on trying since I really can't figure it out heh, I spent a few days tryin' to figure it out. So if anyone knows I'm still open for ideas I suppose.
Reply With Quote
  #4  
Old 03-27-2007, 07:25 AM
Marco van Herwaarden Marco van Herwaarden is offline
 
Join Date: Jul 2004
Posts: 25,415
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

If you don't expect an answer, why post the question?

Also you still have not provided enough details on what you try to do to give you an answer.
Reply With Quote
  #5  
Old 03-28-2007, 10:04 PM
wh005h wh005h is offline
 
Join Date: Jun 2006
Location: Texas
Posts: 7
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

Quote:
Originally Posted by Marco van Herwaarden View Post
If you don't expect an answer, why post the question?

Also you still have not provided enough details on what you try to do to give you an answer.
Well I waited for a bit and the time waited hinted towards no one was going to reply lol, glad someone did though.

As for the details... I want to remove the salt and one of the md5 (the one after adding the salt). Just a simple md5() put on the password.
Right now I'm trying to edit the server to addon the salt and then read it from there. I'll post/edit back if I figure it out lol
Reply With Quote
  #6  
Old 03-29-2007, 06:53 AM
Dismounted's Avatar
Dismounted Dismounted is offline
 
Join Date: Jun 2005
Location: Melbourne, Australia
Posts: 15,047
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

Don't change vBulletin's system, it would reduce security. Modify the existing addon to use 'md5(md5($password . $salt))'. $salt is the `salt` field in the user table.
Reply With Quote
  #7  
Old 03-29-2007, 07:23 PM
wh005h wh005h is offline
 
Join Date: Jun 2006
Location: Texas
Posts: 7
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

Heh Dismounted... I wish the other thing was php but it's not lol. If the other one was php I would have done this a long time ago, in fact I would never have even asked lol

The server is coded in C++ and I have no idea how to mess with that lol. I'm trying right now though but I've yet to find the password comparison string in it. I've tried a bit but I get errors that I don't understand lol, 'void' illegal in all types? lol
Basically all I need to do is find that part of the code and add on the salt field to it (pretty much what you said but in php). Yet, for one I don't know where it is and I wouldn't know how to add it lol

**Edit**
Okay I merged the two databases
I removed vb's salt and added in a second hash to the server
Reply With Quote
Reply


Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump


All times are GMT. The time now is 10:49 PM.


Powered by vBulletin® Version 3.8.12 by vBS
Copyright ©2000 - 2025, vBulletin Solutions Inc.
X vBulletin 3.8.12 by vBS Debug Information
  • Page Generation 0.03779 seconds
  • Memory Usage 2,214KB
  • Queries Executed 13 (?)
More Information
Template Usage:
  • (1)SHOWTHREAD
  • (1)ad_footer_end
  • (1)ad_footer_start
  • (1)ad_header_end
  • (1)ad_header_logo
  • (1)ad_navbar_below
  • (1)ad_showthread_beforeqr
  • (1)ad_showthread_firstpost
  • (1)ad_showthread_firstpost_sig
  • (1)ad_showthread_firstpost_start
  • (1)bbcode_quote
  • (1)footer
  • (1)forumjump
  • (1)forumrules
  • (1)gobutton
  • (1)header
  • (1)headinclude
  • (1)navbar
  • (3)navbar_link
  • (120)option
  • (7)post_thanks_box
  • (7)post_thanks_button
  • (1)post_thanks_javascript
  • (1)post_thanks_navbar_search
  • (7)post_thanks_postbit_info
  • (7)postbit
  • (7)postbit_onlinestatus
  • (7)postbit_wrapper
  • (1)spacer_close
  • (1)spacer_open
  • (1)tagbit_wrapper 

Phrase Groups Available:
  • global
  • inlinemod
  • postbit
  • posting
  • reputationlevel
  • showthread
Included Files:
  • ./showthread.php
  • ./global.php
  • ./includes/init.php
  • ./includes/class_core.php
  • ./includes/config.php
  • ./includes/functions.php
  • ./includes/class_hook.php
  • ./includes/modsystem_functions.php
  • ./includes/functions_bigthree.php
  • ./includes/class_postbit.php
  • ./includes/class_bbcode.php
  • ./includes/functions_reputation.php
  • ./includes/functions_post_thanks.php 

Hooks Called:
  • init_startup
  • init_startup_session_setup_start
  • init_startup_session_setup_complete
  • cache_permissions
  • fetch_threadinfo_query
  • fetch_threadinfo
  • fetch_foruminfo
  • style_fetch
  • cache_templates
  • global_start
  • parse_templates
  • global_setup_complete
  • showthread_start
  • showthread_getinfo
  • forumjump
  • showthread_post_start
  • showthread_query_postids
  • showthread_query
  • bbcode_fetch_tags
  • bbcode_create
  • showthread_postbit_create
  • postbit_factory
  • postbit_display_start
  • post_thanks_function_post_thanks_off_start
  • post_thanks_function_post_thanks_off_end
  • post_thanks_function_fetch_thanks_start
  • post_thanks_function_fetch_thanks_end
  • post_thanks_function_thanked_already_start
  • post_thanks_function_thanked_already_end
  • fetch_musername
  • postbit_imicons
  • bbcode_parse_start
  • bbcode_parse_complete_precache
  • bbcode_parse_complete
  • postbit_display_complete
  • post_thanks_function_can_thank_this_post_start
  • tag_fetchbit_complete
  • forumrules
  • navbits
  • navbits_complete
  • showthread_complete