vB 3.8.4 PL2 - md5($password . $license) doesn't match bbpassword anymore.

[PeterS89]

Hi there,

I was wondering if anyone else use a custom authentication system on non vb pages (not just by including global.php) and have had problems after the 3.8.4 PL2 patch today? This is also happening after applying the 4.0 PL1 patch on my local test boards.

For some reason md5($password . $license) does not match the bbpassword cookie anymore.

Has anyone found out how the bbpassword cookie is calculated now?

--------------- Added [DATE]1261699193[/DATE] at [TIME]1261699193[/TIME] ---------------

Sorry for making this thread. I should have spent some more time playing around with it.

For the ones also having this problem, note that "COOKIE_SALT" is not the license number anymore, but some random generated key. Look at functions.php around line 34. It will say something like

PHP Code:

define('COOKIE_SALT', 'somelongrandomstringhere'); 


The value of somelongrandomstringhere are to be used in the MD5 in stead of the license key.