User could be????

[bigwest]

I have searched and I can't find the answer.....

There used to be a hack (a long time ago maybe vb 2.0) that would allow you to determine users that shared passwords, IP addresses etc. It was much easier than searching for similar IP addresses in the admin CP because it would group all users sharing certain characteristics together so you could tell what users might be the same person.

Is there a modern version of a hack like that?

Thank you in advance for your time.

[bigwest]

Anyone know?

[cyberphr]

I don't think there is. It's not particularly necessary now, you could use the ACP or search the database.

[UltimateOreo!]

I believe there is a modification to check shared IP addresses, but password checking will be no longer available. Not with MD5 and hashing securities.

[EnIgMa1234]

Not really, it can still be done. Just compare the MD5 hashes from the database

[UltimateOreo!]

If I'm not mistaken, the hash "scrambles" the already encrypted password, so it won't be the same. Hehe, I'm probably mistaken though. I'll do more research on it.

[Attilitus]

Right vbulletin stores passwords as salted md5 hashes. What this means is that for each user a random string is generated ("abc" for example) and is stored in the database under their username as a "salt." When they register and enter in their password it is "salted" with the random string before being hashed. So Password becomes md5(passwordabc). Then when a user logs in what they enter is hashed in the same manner with the salt appended to the end.

So there is no way to compare user's passwords as each user has their own individual salt associated with their username.

[EnIgMa1234]

My mistake