Encryption Seed?

[jrwap]

I am trying to integrate a script with vB and I am missing one small item that seems to have changed from 3.0 to 3.5.

You need to open the following files in your vBulletin (v3.x) package: sessions.php
which locates in:  /path/to/vb3/includes/sessions.php
Look for this:
---------------------------------------------------------------------------------
/*======================================================================*\
|| #################################################################### ||
|| # vBulletin 3.0.0 Beta 3 - Licence Number [ENCRYPTION SEED HERE]
|| # ---------------------------------------------------------------- # ||
---------------------------------------------------------------------------------
or search for:     md5($bbuserinfo['password']
----------------------------------------------
It will take you to:
if (md5($bbuserinfo['password'] . '[ENCRYPTION SEED HERE]') == $_COOKIE['bbpassword'])
==================================================================================
Take a note of the "string" where it says   [ENCRYPTION SEED HERE]. For example:
   EX:    
        if (md5($bbuserinfo['password'] . '916875ca') == $_COOKIE['bbpassword'])
The string for [ENCRYPTION SEED HERE] is 916875ca

Since sessions.php is not included in the newer versions, where can I find the encryption seed?

Thanks,

-JRW

[jrwap]

Anyone?

[Kirk Y]

Is it your license number?

[Zachery]

class_core.php

[jrwap]

Thanks for the reply. Its not your customer number...

I checked out class_core.php and found 2 lines that were similar but no encryption seed. It has 'salt' in its place.

Any more ideas?

-JRW

[Zachery]

I'm not sure exactly what you are looking for?

[jrwap]

I posted the instructions above. Its looking for a number which (it seems) is unique. I have to take that 'number' or code and insert it in another script for them to work together.

For those wondering... this is for nePHP.

-JRW

[MrZeropage]

Not sure if I catched what you want, but vBulletin 3.5 automatically uses its own "seed" named "salt".

Each user gets a "salt"-value which is stored in DB (per user) and attached to the first md5-password-hash.

So md5(md5($password).$salt) is how they did it, which is alot better than having a common (unique per forum) salt

[Adult SEO]

Doesn't seem to work in 3.5.4

I tried md5(md5($password).$salt) but it doesn't work.

The salt is 3 characters in VB 3.5.4 btw:
salt char(3)

Please help!

[jrwap]

Originally Posted by Adult SEO

Doesn't seem to work in 3.5.4

I tried md5(md5($password).$salt) but it doesn't work.

The salt is 3 characters in VB 3.5.4 btw:
salt char(3)

Please help!

I emailed Kenny and guess what.... NO RESPONSE.... guess I shouldn't be shocked by that!!

-JRW

Originally Posted by jrwap

I emailed Kenny and guess what.... NO RESPONSE.... guess I shouldn't be shocked by that!!

-JRW

Actually, Kenny just emailed me. I guess they are not releasing patches any more. They simply ask for your FTP details and will do the upgrade themselves. Interesting way of doing things....

-JRW