vBulletin Mods

The Official vBulletin Modifications Site
https://www.vbulletin.org/forum/showthread.php?t=327195

Increase Cost on bcrypt passwords
by Wayne Luke
05 Apr 2019 16:31

1 Attachment(s)
Valid for vBulletin 5.4.5 and higher.

As processors get more powerful, the time co-efficient to decode password hashes decreases. With vBulletin 5, you can increase the cost co-efficient so that the time stays the same with more powerful processors. The attached file does this for the default password hashing schema in vBulletin 5.4.5 and higher.

To install, simply upload the XML file into your /core/includes/xml folder. No other settings are needed. The next time your users log in, their passwords will be stored with the increased cost.

DamasGate 15 Apr 2019 06:52

Thank you very much.


If removed in the In the future, Will we face any login problems?


Thanks again

delicjous 16 Apr 2019 07:19

Thank you.

I upload it to a testforum and there was no change in user-table (token, scheme and secret), datastore 'pwschemes' or passwordhistory. Do this change any data to check if it is working?

Wayne Luke 06 Aug 2019 17:10

After the user's next login, the cost in their password hash will change from 10 to 15. That would be the only data change in the database.

Wayne Luke 06 Aug 2019 17:11

Quote:

Originally Posted by DamasGate (Post 2599111)
If removed in the In the future, Will we face any login problems?

Users will need to reset their passwords in order to login.

delicjous 05 Nov 2019 07:29

Just for information.
I got an error by upgrade to the latest 5.5.6 Alpha as long as I have this file in the core/includes/xml folder (step 19).

Something like "missing error_x phrase"

After delete the pwschemes_xustom file the upgrade run until the complete screen.


All times are GMT. The time now is 06:42.

Powered by vBulletin® Version 3.8.14
Copyright © 2020, MH Sub I, LLC dba vBulletin. All Rights Reserved. vBulletin® is a registered trademark of MH Sub I, LLC
Copyright ©2001 - , vbulletin.org. All rights reserved.