Register Members List Search Today's Posts Mark Forums Read

Reply
 
Thread Tools
  #1  
Old 30 Apr 2007, 13:20
ricc ricc is offline
 
Join Date: Apr 2007
Login Verification Help

Hey, just a short problem and i was wondering if anyone had any info



I use vbulletin as part of a larger site which requires members to login to areas of the site to play games etc, i previously used phpbb2 and it was easy enough to verify members from the forum database for identification using the inbuilt dreamweaver login script and slightly adapting it to understand the hashed members passwords




Block Disabled:      (Update License Status)  
Suspended or Unlicensed Members Cannot View Code.



Unfortunatly, as vb is significantly more complex this is not the case and it will not work



Am i missing something glaringly obvious, like the hash code is different, or can it simply not be done for security reasons?
Reply With Quote
  #2  
Old 30 Apr 2007, 13:21
Dismounted's Avatar
Dismounted Dismounted is offline
 
Join Date: Jun 2005
Real name: Hanson
md5(md5($password . $salt))
__________________
Former vBulletin.org Staff Member

View My Modifications
29 Releases and Counting... Latest Modification: dmActivityStream - vBookie Integration (4.x)

Please do not PM me to ask for support - please use the relevant thread or forum.
Reply With Quote
  #3  
Old 30 Apr 2007, 14:06
ricc ricc is offline
 
Join Date: Apr 2007
What is the $salt bit at the end?
Reply With Quote
  #4  
Old 01 May 2007, 08:13
Dismounted's Avatar
Dismounted Dismounted is offline
 
Join Date: Jun 2005
Real name: Hanson
salt field in the user table. It is unique for each user.
__________________
Former vBulletin.org Staff Member

View My Modifications
29 Releases and Counting... Latest Modification: dmActivityStream - vBookie Integration (4.x)

Please do not PM me to ask for support - please use the relevant thread or forum.
Reply With Quote
  #5  
Old 01 May 2007, 16:19
clarke_kent clarke_kent is offline
 
Join Date: May 2007
The $salt is a random 3 character string that is stored in the user table and is appended to the md5 hash of the password and then md5'd again.
Reply With Quote
  #6  
Old 03 May 2007, 06:18
byon byon is offline
 
Join Date: Apr 2007
Post

Originally Posted by Dismounted View Post
md5(md5($password . $salt))
sorry to jump track abit.
1. does this immediately give us the hash that matches what the database has, if the password is correct?
2. where can we find implementations of cookies/sessions through out the whole website?
Reply With Quote
  #7  
Old 03 May 2007, 07:15
Dismounted's Avatar
Dismounted Dismounted is offline
 
Join Date: Jun 2005
Real name: Hanson
1./ Yes
2./ login.php (probably leads you to includes/functions_login.php)
__________________
Former vBulletin.org Staff Member

View My Modifications
29 Releases and Counting... Latest Modification: dmActivityStream - vBookie Integration (4.x)

Please do not PM me to ask for support - please use the relevant thread or forum.
Reply With Quote
  #8  
Old 03 May 2007, 09:03
byon byon is offline
 
Join Date: Apr 2007
Originally Posted by Dismounted View Post
1./ Yes
2./ login.php (probably leads you to includes/functions_login.php)
ill search for existing implementations on the board, hopefully there is.
thanks
Reply With Quote
  #9  
Old 10 May 2007, 19:19
ricc ricc is offline
 
Join Date: Apr 2007
Even after a week i am still having trouble with this problem, being a poor coder, i am using dreamweavers built in login wizard, it worked fine with phpbb2 but i am unable to get it to work with vbulletin. i have copied the code and highlighted the bits i have amended, but it still does not work, any help will be greatly appreciated


Block Disabled:      (Update License Status)  
Suspended or Unlicensed Members Cannot View Code.

Reply With Quote
  #10  
Old 10 May 2007, 19:39
Zero Tolerance's Avatar
Zero Tolerance Zero Tolerance is offline
 
Join Date: Feb 2004
Real name: Scot
Try this


Block Disabled:      (Update License Status)  
Suspended or Unlicensed Members Cannot View Code.

- Zero Tolerance
Reply With Quote
  #11  
Old 12 May 2007, 18:15
ricc ricc is offline
 
Join Date: Apr 2007
You sir are a legend!

Worked perfectly
Reply With Quote
  #12  
Old 04 Jul 2007, 15:46
wcm wcm is offline
 
Join Date: Sep 2006
hmm, I can't this to work.
The script directs to the login.php page but the login.php seems to redirect straight away to the index page. I do not get logged in.

Any ideas?

nvm, this seem to be the reverse of what I want to do.
I want to be able to login from another page directly into VB with a click on a link.


http://www.vbulletin.org/forum/showthread.php?t=109372
The solution in the thread I posted used to work but not any more for some reason.

Last edited by wcm; 04 Jul 2007 at 15:51.
Reply With Quote
  #13  
Old 20 Jul 2007, 14:14
vbeval vbeval is offline
 
Join Date: Jul 2007
Any updates on this

Hi,

Did you manage to find a solution for this? I am still facing the same problem as well. Any help will be greatly appreciated.

Thank you
Reply With Quote
Reply

Similar Threads
Thread Thread Starter Forum Replies Last Post
Miscellaneous Hacks captchaLogin - image verification login Coders Shack vBulletin 3.6 Add-ons 33 08 Jul 2010 20:20



Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 
Thread Tools

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off


New To Site? Need Help?

All times are GMT. The time now is 05:17.

Layout Options | Width: Wide Color: