Need assistance reading plain text password that user registers with

[Leonard]

Hi all,

Here's an interesting problem.

Because of the requirements of this company I'm working for, whenever a user registers on our forum, it checks if the user already has a company account. If one doesn't exist, it creates a new account on a separate database. Account passwords on this database are plain text.

I have created a plugin at the hook point "register_addmember_complete".

The actual PHP code in register.php is using the variable $vbulletin->gpc['password']

When I try to call this variable from within my plug-in, it comes out blank.

e.g. $mypassword = $vbulletin->gpc['password'];
results in a blank $mypassword.

Does anyone know how I can get access to the plain text password that a user enters, from the "register_addmember_complete" hookpoint?

Best,

Leo

[cheesegrits]

You'll have to do this:

PHP Code:

define('DISABLE_PASSWORD_CLEARING',1); 


... in your config.php. This is not set by default, which means the md5hash() javascript routine clears the clear text password form data so only the md5 version is sent over the wire. But you may define it yourself, as per this comment in global.php:

PHP Code:

// you may define this if you don't want the password in the login box to be zapped onsubmit; good for integration
$show['nopasswordempty'] = defined('DISABLE_PASSWORD_CLEARING') ? 1 : 0; // this nees to be an int for the templates 


Although the comment is a little misleading, as it really applies to anywhere a password is submitted from the browser, like during registration or when changing passwords, not just on login.

Will you have to worry about syncronizing passwords between the corporate db and vB? i.e. if they change their vB password, will you need to update the corporate db, and vice versa? Or is it just a one off thing during registration?

-- hugh

[Leonard]

Hugh,

Thanks!

Note: $vbulletin->gpc['password'] is still null, but $_POST['password'] is intact.

Cheers mate,

Leo

[cheesegrits]

Do you mean $vbulletin->GPC['password']? Variable names are case sensitive. It should be OK, as it's included in the clean_array_gpc() call in the register code.

-- hugh

[Leonard]

Haiz that was probably the problem!

Argh. Staring at this code too long....

L.