Password Encryption

[JacBowen]

Ok, I have searched the forums there has been topics... but none of them helpfull.

I have a CMS and at the moment it runs off a seperate database to vBulletin.
What I am trying to do is use my vBulletin user Database so users can use the CMS without having to register all over again.

So say I post up something on the main page, the user can use his vBulletin account to comment the story I put on the main page.

Now I need to know how to remove encryption from passwords, yes this could decrease security... but my CMS isn't encrypted so it's the same basically.

If I somehow remove encryption then I could just connect easily.

I'm not the best coder in the world so I use Dreamweavers Developer Toolbox, now this basically means you click a few boxes and you have a CMS , so try not to confuse me too much ? .

Thanks alot,
Jac

[Dismounted]

You CAN'T reverse the encryption. It's a hash, one-way only. That's the beauty of it. You can work around this by converting your CMS password style to match vBulletin's, since you say you store them plaintext (bad!), they can be converted easily.

[JacBowen]

Thanks for your reply. But how would I go about creating it as hash? There is a option in the developer toolbox to encrpy it via MD5. But will this use it's own encryption method?

[Dismounted]

You need to encrypt passwords like so:

PHP Code:

md5(md5($password) . $salt); 


Where $password is the plaintext password and $salt is a random 3 character string, and is stored in the `salt` field in the user table.