[Discontinued 1.5.1RC1] Md5 Encryption

[Big P]

As i've just found out, if you apply this to your board and keep the database when you re-install, you have to apply this mod again before any users can login

Of course you do. The passwords are stored in the DB you backup in the md5() format.

[Horus]

I upgraded from yabbgold and I was using the password mod which encrypts the passwords, and when I upgraded to Yabbse I found another mod (see this thread for more info) that enabled me to keep the passwords instead of forcing my members to change their passwords, so my question is will this work with that mod, as there is no other way that my members can login without the password mod.

[[Unknown]]

Currently, it won't.  I can show you how to make it, however...

Find this line in my mod.  (LogInOut.php)

Code Select Expand

         if ($settings[0] == crypt($passwrd, substr($passwrd, 0, 2)))

And replace it with:

Code Select Expand

         if ($settings[0] == crypt($passwrd, $pwseed))

-[Unknown]

[Horus]

I'm slightly confused so please bear with me as I will try to explain what I think I need to do to get it to work.

My forum now has the password mod mentioned in previous post, so the first step would be to go back to the original files (without the mod), then apply your Mod and once that is done then modify the LogInOut.php as you instructed above. Please let me know if that is not the case.



Thanks in advance

[[Unknown]]

Well, only one difference.

Back up your current files AND MORE IMPORTANTLY YOUR DATABASE, then do that.  If it doesn't work, restore the backups.

-[Unknown]

[Horus]

It works like dream, thank you sooooo much

[[Unknown]]

I can tell you how to do the same thing with 1.5.1 final. (and my mod won't need to be isntalled.)

Just PM me.

On another note, I'm discontinuing this mod.  A (much) better version of it has been built into 1.5.1.

-[Unknown]

[Horus]

I've just upgraded my forum to 1.5.1 and it seems to work just fine, Thanks again mate

[[Unknown]]

Some of your users won't be able to login.

You need to search for "crypt($passwrd, substr($passwrd, 0, 2))" in LogInOut.php, and replace it with "crypt($passwrd, $pwseed)".

-[Unknown]

[Horus]

My limited knowledge and commonsense tells me I also need to change the seed to the one yabb gold used use "$pwseed = 'yy';" in Subs.php, would that be right?

Cheers

[[Unknown]]

Yes... that would be a good idea.

-[Unknown]

[Daniel Hofverberg]

On another note, I'm discontinuing this mod.  A (much) better version of it has been built into 1.5.1.

What's the difference between how this mod works and how it works in 1.5.1 final?

[[Unknown]]

On another note, I'm discontinuing this mod.  A (much) better version of it has been built into 1.5.1.

What's the difference between how this mod works and how it works in 1.5.1 final?

This only md5's the password.  1.5.1 final uses keyed encryption.... and the cookie is also md5'd in 1.5.1.

-[Unknown]