Remove the SALT check from the password hash

[DrKNickel]

Hello everyone,

i have a really big user database from a selfcoded cms. We would like to integrate Vbulletin and import the users from the cms database to the vbulletin database.

The cms database uses md5 hash to store the passwords.

Vbulletin as far as i understand uses md5 plus the salt method.
$password_hash = md5(md5($password_text) . $user_salt);

A simple import does not work. Is it possible to remove the salt check? Or do you have another idea for a solution for my problem?

Thank you very much for your help,

greets drknickel

[Dylanblitz]

Here is how I would do it.

Add your cms user table to the vb database.
Create a script to go through each cms user record and pull the user data into a variable
Generate a random salt, add the salt to the encrypted pass then encrypt it again
Use the function to create a user from the new data
Update the new user record so you can use the salt you created and not the one that auto generates from the user creation.

You wouldn't want to do a straight import anyway, salt or not.