Using Forum Username and Password for game client

[BlackJacket]

I am developing a game and want to use the username and password the user created on the forum, for the game.

How do i go about using the password? For example, when a user inputs their password in the game client to login, how would it verify, etc? What would i need to know to get it to work?

Thanks

[Dygear]

Well first off, you'll need to connect to the MySQL database that the forum is using, you can get the forum's database credentials from the config.php file within the includes directory. From there, connecting to the database, and then selecting the users table. There you would want to check against the username and password. But keep in mind that the password has a salt. So you'll MD5 (I'm pretty sure that's what they are using here) the password the user supplys, and then take the MD5'd password and MD5 that with the salt concated on to the end of the string. If that matches the information in the password column for that username, then they they should be successfully logged in.

Now I'm not sure if it's MD5 or SHA1, MD5 is kinda out of vogue due to a slight problem with hash collisions, so must people updated to SHA1, but even SHA1 has it's collision problems.

[BlackJacket]

Thanks DyGear.

Can anyone confirm which encryption type is being used?

[consolegaming]

I'm pretty sure they use MD5. Though I'll check the code we use for our site this evening. We have a site that interfaces with our forums.

We didn't use the traditional include global.php route as we didn't like the fact that if you were suspended on the forums then it suspended you from all of the site too (any page that included global.php).

So we handle things ourselves (on the most side). The one thing we don't currently handle though is the logging in lol. We just send the form to the same place as the forum's. But they do use the same encryption method in a few places like for the cookies so I'm fairly sure they do use MD5.

[Dygear]

It does use the MD5'd variable as I've described. Kinda surprised at my memory with that one.