vBulletin Encryption Info

[SupaJ]

Hello all..

I want to intergrate the registration from my site and the forums into one and I need to know how to encrypt the password for the forums, and what other things you need to know about the vbulletin registrar.

My site is coded in Coldfusion (.cfm)

Help is much, much appreciated.

 

[iNod]

Hello,

So you want to learn how to encrypt passwords using CFM?
Or how VB does it? Or are you trying to create a login form to your VB board on your website.

iNod

 

[SupaJ]

I'm trying to intergrate the registration from our site in CFM and have it add the user names to the vBulletin Database, but I don't know how to encrypt the password the way vBulletin does it. I can encrypt it via CF but it doesn't do it the same way.

 

[Kate]

I guess the passwords are MD5-encrypted, like phpBB.
So perhaps this info could help you: http://www.macromedia.com/devnet/server_archive/articles/understanding_encrypt.html#999931

 

[SupaJ]

<cfset hash1 = "#hash('lakisic1')# . salt">
<cfset hash2 = "#hash(hash1)# . licensenumber">
<cfoutput>#hash(hash2)#</cfoutput>

That's what I tried. Any other ideas?

 

[Kate]

I don't think you shouldn't add a salt. The Hash function uses MD5.
For example if you want to authenticate a user based on the vbulletin user DB you should do something like:

<cfif Hash([pwd entered by user]) is not [value of hashed pwd in database]>
  <cflocation url = "failed.cfm">
<cfelse>
  <cflocation url = "success.cfm">
</cfif>

 

[SupaJ]

Still didn't work mate

 

[CreativeLogic]

vBulletin hashes their passwords twice and uses a salt. What I would recomment doing is creating a simple php file and include it in your cold fusion pages something like this:
vbpass.php?pass=sendthis

Then in vbpass.php just do the same encryption method that vBulletin uses in their register.php file.