md5(md5(password)) --> md5(password)

[tscbh]

Is there any hack that turn the complicated authentication into just md5(password) + salt. I want to validate my member against mod_auth_mysql which only take md5(password) + salt.

vBulleting Support tell me that some body outthere already made this modification. If you have any idea, please let me know.

Thanks for any suggestion

p.s. I also posted in vb2 forum. sorry wrong forum.

I solved the problem myself.

Instead of modify vb code, I modified mod_auth_mysql.c to meet the requirement of vb authentication algorithm.

For those interested, here is the code:
note: this for for mod_auth_mysql.c version 2.9.0. I don't know any other mod. I am very happy of my first ever achievement. I completed this modification within 1 hr w/o much knowledge of vb and c programing. I bought vBulletin 2 days ago :smoke: and never use any forum before. The completed source code is attached.

Repalce this:

return strcmp(real_pw,ap_md5(pool, (const unsigned char *) sent_pw)) == 0;

with this:

return strcmp(real_pw,ap_md5(pool, strcat(ap_md5(pool,(const unsigned char *) sent_pw), salt))) == 0;

Replace this:

{"md5", NO_SALT, pw_md5},

with this:

{"md5", SALT_REQUIRED, pw_md5}, //vBulletin Authentication

[jdalbis]

Nice Job. Here's the version for vB 3.6.4 on RedHat ES 4 (mod_auth_mysql-2.6.1):

867c867,868
< if (encryption_type == PW_ENCRYPT_CRYPT && /* Salt is only for crypt'd passwords */
---
> if ((encryption_type == PW_ENCRYPT_CRYPT || /* Salt is only for crypt'd passwords */
> encryption_type == PW_ENCRYPT_MD5) && /* or MD5 */
902c903
< if(strcmp(real_pw,ap_md5(r->pool, (const unsigned char *) sent_pw)) == 0) {
---
> if(strcmp(real_pw,ap_md5(r->pool, strcat(ap_md5(r->pool,(const unsigned char *) sent_pw),salt))) == 0) {
904a906,916
> else if(strcmp(real_pw,ap_md5(r->pool, (const unsigned char *) sent_pw)) == 0) {
> passwords_match = 1;
> }

[svoeric]

Bump for a good job. I made the code changes in the first post to version 3.0.0, and it works. Thanks much!!!
2 years old, and still good info!