Turn off client side password encryption

[Marco van Herwaarden]

If i remember correct the following in your config.php should also enable sending of plaintext passwords:

PHP Code:

define('DISABLE_PASSWORD_CLEARING', true); 


Be aware however that this does decrease password security a lot.

A much better solution would be to add the second hashing mechanism to the hashed passwords available in the application.

To do this on the vBulletin side, you might consider change the password hashing on the client side and has it also in the format Notes expects before clearing the plaintext vBulletin password.

I guess it is better to sent 2 hashed versions of the password over the internet, then 1 time in plaintext.