unethical question re: password logging

[UltimateOreo!]

Well, you could just remove all of the md5 coding, you could just go into phpmyadmin. Although, I wouldn't even try something as stupid as that. WAY too insecure.

[Dismounted]

I'm sure Marco posted a constant so that they wouldn't be zapped, without the need to edit any JS.

[dizzine]

having no hashing is not an option..
anyone want to earn a few notes writing me some code..?
happy to pay and keep it all private if you wish..
thanks all, very interesting topic.
diz
x

[Dismounted]

You don't understand...We're not saying to disable the MD5 hashing. The problem is that vBulletin automatically hashes the input before it even reaches the server.

[dizzine]

i do get it, just..but one of the suggestions was to turn off hashing and store plain text in the db..thats what i meant when i said 'not an option'..
i guess i need code/js to grab the plain text before vbulletin sees it..is that nearer the mark?
ty
diz

[Dismounted]

You can turn off having vBulletin hashing it before it reaches the server. No matter what path you go down, you would have to do that.

[Dave Hawley]

I'm shocked that this Threads lasted the time it has! While the OP may not have bad intentions, anyone can read this thread!

[dizzine]

yeah youre right Dave..maybe too much info in this thread for the general consu,er, though as there really is no easy way around the issue i originally posted i think the community is safe..

one final question not really relating to the original topic..
when you turn off or remove the hashing of passwords, does that mean everyone has to enter new ones the next time they log in?