Firefly, a question for you

Can $bbuserinfo[password], the one that was parsing the full MD5 hashed from usercp be caught from all over VB pages or is it specific only to some pages? Because it it can, that could solve my problem with a cgi. I could tell the cgi to match those characters with the database.

[Admin]

Yup, it's available from everywhere.

[Lionel]

then all I would have to do is use $buffer from the cgi (from the page it came from) and have that cgi do a query into vb database and match that username and MD5 string. If it matches, that will be the check password. If it doesn't then &login_form exit;

I get ideas, ideas... now I've got to find a good soul to tell me how to do that cgi database query...

[Lionel]

and where (is it in root/global.php) that I insert this line:

mysql query
UPDATE cgimysqldb.user SET password=$bbuserinfo[password] WHERE username=$bbuserinfo[username];