[Hiatus-]

Hello, I am currently coding a program and I want my website users to be able to use their forums information to log into the program. The problem I ran into was with the passwords. How would I correctly pull the passwords from the vb database to use in my program (the hash is what makes it difficult). Also I am programming in c#. Any help would be very appreciated.


Thanks.

[Carnage]

you might find yourself better off using the mobile api

[kh99]

In case it helps, what's stored in the vb user table password field is md5(md5(password) . salt)), where 'password' is the user's password and 'salt' is the value from the 'salt' field from the user table.

[Hiatus-]

Originally Posted by Carnage

you might find yourself better off using the mobile api

what exactly do you mean by this?

--------------- Added 31 Dec 2012 at 18:14 ---------------

Also, I got it working with the algorithm that kh posted. Thank you for the help

[Carnage]

Originally Posted by Hiatus-

what exactly do you mean by this?

--------------- Added 31 Dec 2012 at 18:14 ---------------

Also, I got it working with the algorithm that kh posted. Thank you for the help

Well, the C# program you are writing is external to the forums, ideally you wouldn't give it direct access to your vbulletin database. If you use the API that the mobile apps use you will have a more secure way to authenticate a user against your forum's database.

If you intend to distribute the program to anyone if it has direct access to the database, it will present a massive security issue. (Somewhere the program will need your database credentials, allowing a malicious user to obtain them from it)