VB passwords (MD5 with Salt)?

[paulmon]

I'm going to be importing my user database from Geeklog as I'm switching from GL to VB with VBA. Geeklog stores it's password as an MD5. From what I've read here so does VB with the difference that VB uses a SALT as well. Is there any way for me to import the passwords from Geeklog (as it doesn't use a salt) or am I out of luck? I really don't want my users to have to go through the hassle of doing a forgotten password recovery.

Help, anyone...

Cheers,

Paul

[Zachery]

Originally Posted by paulmon

I'm going to be importing my user database from Geeklog as I'm switching from GL to VB with VBA. Geeklog stores it's password as an MD5. From what I've read here so does VB with the difference that VB uses a SALT as well. Is there any way for me to import the passwords from Geeklog (as it doesn't use a salt) or am I out of luck? I really don't want my users to have to go through the hassle of doing a forgotten password recovery.

Help, anyone...

Cheers,

Paul

Have you tried looking at how impex works and modifiying it to your own needs? there are API docs.

[paulmon]

Originally Posted by Zachery

Have you tried looking at how impex works and modifiying it to your own needs? there are API docs.

Yeah, that's what I was going to be looking at; however I just noticed the difference in the way passwords were handled and thought I'd ask.

Paul

[Andreas]

The passwords of VB3 are stored in the database as md5(md5('plaintext_password') + salt).

You already got md5('plaintext-password') from your geeklog database.
So the only thing you have to do is generate a random sort, then concatenate the existing hash with this salt, hash it again and you're done.

[paulmon]

Originally Posted by KirbyDE

The passwords of VB3 are stored in the database as md5(md5('plaintext_password') + salt).

You already got md5('plaintext-password') from your geeklog database.
So the only thing you have to do is generate a random sort, then concatenate the existing hash with this salt, hash it again and you're done.

Thanks KirbyDE, that worked a charm.

Paul