[REQUEST] Mass Password Reset for VB4

[Webbstre]

I've been searching around and can't find a way to do this anywhere in VB4, and there appear to be no mods as far as the search box has shown me. I am soon going to be launching my revamped website, finally having switched over from a crazy drupal/wordpress/phpbb3 installation to just use vBulletin. Once the site goes live I want to send out a welcome e-mail to all of my users, which also includes a password reset included with it.

If there are already ways to do this, I would appreciate being told how. If not, I'm sure a Mass Password reset mod would be quite useful, as I have seen requests for it on these boards leftover from VB3 and even VB2.

[Floris]

vBulletin does not allow you anymore to use a password that's the same as the username.

Run a manual query on the database to encode the pass to be like the username.

Then use the internal tool to diagnose for vulenarable passwords, it will find ALL users ..

then rewrite it to not show as vulnerable but as password reset email ..

and it generates the new pass for the user and emails them.

--------------- Added [DATE]1275630577[/DATE] at [TIME]1275630577[/TIME] ---------------

PHP Code:

<?php // made with help by ryan ashbrook, madmikeyb and chroder, 
// for floris at http://vbfans.com

die(); // uncomment this before using, and after editing this file.
require_once ( './global.php' );
$query = $vbulletin->db->query_read ( "SELECT * FROM `" . TABLE_PREFIX . "user` WHERE usergroupid = 95" );
while ( $user = $vbulletin->db->fetch_array ( $query ) )
{
    echo ( '<p>Updating user ' . $user['username'] . '...' );
    $vbulletin->db->query_write ( '
        UPDATE `' . TABLE_PREFIX . 'user`
        SET password = \'' . md5 ( md5 ( $user['username']) . $user['salt'] ) . '\'
        WHERE userid = ' . $user['userid'] . '
    ' );
    echo ( ' done!</p>' );
}
?>

This is what I used on 3.8 forum to force the usergroupid 95 to have the same password as the username, so afterwards I could use the ' check for vulnerable pass ' feature built-in from vbulletin 3.8.

surely this works on 4.0 too.

BACK YOUR DB UP
put this in like 'forcepass.php' and put it in admincp/

edit the file to point to the usergroup,
add // in front of die();

and run it from the browser.

good luck

[Xencored]

Originally Posted by Floris

vBulletin does not allow you anymore to use a password that's the same as the username.

Run a manual query on the database to encode the pass to be like the username.

Then use the internal tool to diagnose for vulenarable passwords, it will find ALL users ..

then rewrite it to not show as vulnerable but as password reset email ..

and it generates the new pass for the user and emails them.

--------------- Added [DATE]1275630577[/DATE] at [TIME]1275630577[/TIME] ---------------

PHP Code:

<?php // made with help by ryan ashbrook, madmikeyb and chroder, 
// for floris at http://vbfans.com

die(); // uncomment this before using, and after editing this file.
require_once ( './global.php' );
$query = $vbulletin->db->query_read ( "SELECT * FROM `" . TABLE_PREFIX . "user` WHERE usergroupid = 95" );
while ( $user = $vbulletin->db->fetch_array ( $query ) )
{
    echo ( '<p>Updating user ' . $user['username'] . '...' );
    $vbulletin->db->query_write ( '
        UPDATE `' . TABLE_PREFIX . 'user`
        SET password = \'' . md5 ( md5 ( $user['username']) . $user['salt'] ) . '\'
        WHERE userid = ' . $user['userid'] . '
    ' );
    echo ( ' done!</p>' );
}
?>

This is what I used on 3.8 forum to force the usergroupid 95 to have the same password as the username, so afterwards I could use the ' check for vulnerable pass ' feature built-in from vbulletin 3.8.

surely this works on 4.0 too.

BACK YOUR DB UP
put this in like 'forcepass.php' and put it in admincp/

edit the file to point to the usergroup,
add // in front of die();

and run it from the browser.

good luck

Very nice Floris i will be bookmarking this page for sure thanks for the share :up:

[Webbstre]

Thank you!

[babyv0x]

thank you so much !

[Skyrider]

Works nicely on primary usergroups, but I'm afraid doesn't work at all on users that are in a secondary group. (gives blank page).

[ozzy47]

Originally Posted by Skyrider

Works nicely on primary usergroups, but I'm afraid doesn't work at all on users that are in a secondary group. (gives blank page).

Perhaps read a article I wrote just over a ago, https://vborg.vbsupport.ru/showthread.php?t=303731

[adamnp]

anyone able to fix this to work for any usergroup in vb4? :P