Modifying Register.php

[Hisoka96]

Hi guys i was trying to modify some custom fields in my register.php and foundt up an interesting thing.

For the debug i've used a .txt file to see if return the right things in the field,used the following code:

$myfile = fopen("newfile.txt", "w") or die("Unable to open file!");
$txt = $vbulletin->GPC['username'];
fwrite($myfile, $txt);
fclose($myfile);

And that works for every field but not for Password or Confirmpassword.
I actually know that password works just fine and don't need debug but i'd like to know why that exception happen,in the .txt file i can find every field but not password.

Why?

[kh99]

For a little added security, there's javascript on that page that hashes the 'password' and 'confirm' fields using md5, and sends the hash values in the password_md5 and passwordconfirm_md5 fields. It clears the password and passwordconfirm fields (because of course there's no point if it leaves the plain text values there).

If you have some reason to access the plain text password, you can turn off the clearing of the plain text fields by defining DISABLE_PASSWORD_CLEARING (probably the config.php is a good place). It's obviously a little less secure that way, but I don't believe it's a major security risk.