2 Hack Requests

[Logician]

Originally posted by scsa20
Reason for this?? it's because any normal hacker that likes to hack into peoples sites won't be able to crack a MD5 hashe encryption (unless they are on the run for doing so)...and so that any of your admins/mods won't be able to go into someones account and start posting sh*t under there name

Are you sure?

If you manage to access MD5 hash password of someone all you have to do is to change your vb cookie in your browser and replace userid and password sections with these info of the user. So you will be able to login as HIM unless he disabled "remember me" setting in his User CP and you dont need to decrypt his password.

Besides if a hacker managed to login your site and access your database, user password security and his spamming in your site as you will be your last concern..

@PaulBearer2k: whatever the reason to save password in MD5 format is, it's true that you and your mods cant read them inside your cp. No way unless you alter your database and save the unencrypted version of the password in a new field whenever it's updated..

Logician