VB Login

[t0ny]

Does VB just look at the username / password in the cookies to test if it is logged in? Will it work without cookies enabled?

I want to login / check if a user is logged in from a non-forum page?

1- wrong forum, read the forums descriptions before posting

2- without cookie will make a trace in all urls, containing the session ID so your users can login from non-vB pages with the specific hack with that name!

[t0ny]

Sorry, for wrong forum, i am so stuggling to find where to put most of my questions...

Is there anywhere that describes this procedure, i don't mind coding anything, but would just like to know how VB does the login.

I have a main page that supports commenting and blogs and things that people need to login to use. I have decided that the login is going to backonto the vB database, just was not sure if it is done with sessions or purely cookies...

https://vborg.vbsupport.ru/showthread.php?t=96013
https://vborg.vbsupport.ru/showthread.php?t=91129

[akanevsky]

As Kirby mentioned somewhere, and as is mentioned in my vBulletin API Tutorial:

Authentication Storage

The authentication data is stored in the following way:

$_COOKIE:
{cookiepfx}userid - plain(userid)
{cookiepfx}password - md5(md5(md5('PlaintextPassword'), salt), 'LicenseNo').

TABLE user:
password - md5(md5('PlaintextPassword'), salt)

Note that for cookie, {cookiepfx} is your board's cookie prefix. It is configurable via admincp and is accessible via the COOKIE_PREFIX constant.

[t0ny]

Ok, i am sure this is going to go down like a lead balloon, but here goes. My main site is written in ASP, i have since decided this was a bad move, but it is too far in now..

I can read the cookies and have no issue talking to the vb database, but is there anything that VB does when you login in terms of sessions?? as I would not know how to check this!?

Also is there a description of the cookie, ie where can i find the SALT?>

[ConKien]

Originally Posted by Psionic Vision

As Kirby mentioned somewhere, and as is mentioned in my vBulletin API Tutorial:

Authentication Storage

The authentication data is stored in the following way:

$_COOKIE:
{cookiepfx}userid - plain(userid)
{cookiepfx}password - md5(md5(md5('PlaintextPassword'), salt), 'LicenseNo').

TABLE user:
password - md5(md5('PlaintextPassword'), salt)

Note that for cookie, {cookiepfx} is your board's cookie prefix. It is configurable via admincp and is accessible via the COOKIE_PREFIX constant.

Hi Psionic Vision, is it true that if a user did not check [Remember Me] when login, you don't have {cookiepfx}userid & {cookiepfx}password to read using var $_COOKIE? and $_COOKIE can only use when register_global is allowable from the host?

Thanks
CK