Register Members List Search Today's Posts Mark Forums Read

Reply
 
Mod Options
[SMF] Imported User Password Hack Details »»
[SMF] Imported User Password Hack
Mod Version: 0.11, by muf (Coder/Designer) muf is offline
Developer Last Online: Jan 2012 I like it Show Printable Version Email this Page

vB Version: 3.5.0 Rating: (2 votes - 3.00 average) Installs: 11
Released: 30 Sep 2005 Last Update: Never Downloads: 229
Not Supported Template Edits Code Changes  

Resource : [SMF] Imported User Password Hack
Type : Source Code Modification
Version : 0.1
Author : mf @ http://www.videngineering.net

Description : After SMF import, no need to reset password!

vBulletin impex hashes all imported passwords with salt; md5(old_password . salt). For most forums, that means md5(md5(password) . salt). For SMF, however, that means md5(md5_hmac(password, username) . salt). Since vB login checks for md5(md5(password) . salt), that means an imported SMF user will have to have his/her password reset. That, or you install this little hack.

Tested : Yes, tested on 3.5.0 Stable (will not work on vB 2.x or 3.0.x)

Screenshot : None, obviously

Notes : My first hack :speechless:

Download Now

Only licensed members can download files, Click Here for more information.

Show Your Support

  • To receive notifications regarding updates -> Click to Mark as Installed.
  • This modification may not be copied, reproduced or published elsewhere without author's permission.
Similar Mod
Mod Developer Type Replies Last Post
Check user password hack Ver 1.0 Birdie501 vBulletin 2.x Beta Releases 18 20 Jul 2002 17:19

Comments
  #2  
Old 30 Sep 2005, 19:40
Floris Floris is offline
 
Join Date: Jan 2002
Good stuff! Glad I could help you a bit and so cool that you worked it out how to do this. [Installed]
__________________
My community; http://wetalknation.net
Reply With Quote
  #3  
Old 30 Sep 2005, 19:55
Reeve of shinra's Avatar
Reeve of shinra Reeve of shinra is offline
 
Join Date: Oct 2001
Pretty cool, and grats as well for this being your first hack. I am sure this will be inspiration for other password hacks too.

This gave me an idea though... maybe upon importing, add all users to a secondary usergroup and have the plugin system redirect to a page where the user can enter htier old password nad have it changed to the new vb-hash format and then it takes them out of that secondary usergroup.
__________________
Make someone smile today!
Reply With Quote
  #4  
Old 30 Sep 2005, 20:19
Floris Floris is offline
 
Join Date: Jan 2002
Originally Posted by Reeve of shinra
Pretty cool, and grats as well for this being your first hack. I am sure this will be inspiration for other password hacks too.

This gave me an idea though... maybe upon importing, add all users to a secondary usergroup and have the plugin system redirect to a page where the user can enter htier old password nad have it changed to the new vb-hash format and then it takes them out of that secondary usergroup.
Nice idea there Reeve, perhaps make that suggestion on vbcom/suggestion forum
__________________
My community; http://wetalknation.net
Reply With Quote
  #5  
Old 30 Sep 2005, 21:12
muf muf is offline
 
Join Date: Sep 2005
Originally Posted by Reeve of shinra
Pretty cool, and grats as well for this being your first hack. I am sure this will be inspiration for other password hacks too.
Thanks! I might be posting other hacks in the future as I stumble upon needs that stock vBulletin lacks.

Originally Posted by Reeve of shinra
This gave me an idea though... maybe upon importing, add all users to a secondary usergroup and have the plugin system redirect to a page where the user can enter htier old password nad have it changed to the new vb-hash format and then it takes them out of that secondary usergroup.
That wouldn't be needed, since the old passwords *ARE* stored in vB's new secure format. They're just as secure if not more secure (HMAC hashes data with a key, MD5 only hashes data), so while you have the hack installed, there is no reason to change password.
Reply With Quote
  #6  
Old 30 Sep 2005, 21:15
Reeve of shinra's Avatar
Reeve of shinra Reeve of shinra is offline
 
Join Date: Oct 2001
Posted it up there,... maybe the plug in can take the password entered, verify it against the old hash, then update the field with the new vb hash and take them out of the 2nd group. Then it becomes completely invisiable to the end user.
__________________
Make someone smile today!
Reply With Quote
  #7  
Old 30 Sep 2005, 21:17
Reeve of shinra's Avatar
Reeve of shinra Reeve of shinra is offline
 
Join Date: Oct 2001
Originally Posted by muf
That wouldn't be needed, since the old passwords *ARE* stored in vB's new secure format. They're just as secure if not more secure (HMAC hashes data with a key, MD5 only hashes data), so while you have the hack installed, there is no reason to change password.
I agree, im just thinking aloud from the perspective of trying to eliminate the need for hack so people can throw up the default files and not have to worry about editing files.
__________________
Make someone smile today!
Reply With Quote
  #8  
Old 30 Sep 2005, 21:24
Floris Floris is offline
 
Join Date: Jan 2002
For reference: http://www.vbulletin.com/forum/showthread.php?t=156593
__________________
My community; http://wetalknation.net
Reply With Quote
  #9  
Old 02 Oct 2005, 17:38
Lea Verou's Avatar
Lea Verou Lea Verou is offline
 
Join Date: Jul 2005
Real name: Lea Verou
I just WISH there was something like this when I imported SMF...
I lost a bunch of active members because of the reset...
Reply With Quote
  #10  
Old 04 Oct 2005, 10:07
San San is offline
 
Join Date: Sep 2005
I have installed this modification correctly in 3.5 stable but it does not work

why?
Reply With Quote
  #11  
Old 04 Oct 2005, 11:23
Floris Floris is offline
 
Join Date: Jan 2002
Originally Posted by Loukrhtia
I just WISH there was something like this when I imported SMF...
I lost a bunch of active members because of the reset...
Sorry, the 'turn back time' plugin for 3.5 isn't made yet. (50% done)
__________________
My community; http://wetalknation.net
Reply With Quote
  #12  
Old 04 Oct 2005, 11:24
Floris Floris is offline
 
Join Date: Jan 2002
Originally Posted by San
I have installed this modification correctly in 3.5 stable but it does not work

why?
We have of course NO clue.

What exactly does not work, can't they login? Do you get an error - more information is as usual 'very handy'.
__________________
My community; http://wetalknation.net
Reply With Quote
  #13  
Old 04 Oct 2005, 11:50
San San is offline
 
Join Date: Sep 2005
Originally Posted by Floris
We have of course NO clue.

What exactly does not work, can't they login? Do you get an error - more information is as usual 'very handy'.
You have entered an invalid username or password. Please press the back button, enter the correct details and try again. Don't forget that the password is case sensitive. Forgotten your password? Click here!

You have used 1 out of 5 login attempts. After all 5 have been used, you will be unable to login for 15 minutes.


I do not get any code's error but simply the forum does not recognize SMF imported password
Reply With Quote
  #14  
Old 05 Oct 2005, 11:33
DianaBlu DianaBlu is offline
 
Join Date: Oct 2005
Hello
Same problem,as described above...
I did SMF import,installed (correctly) required hack,but passwords are not recognized and I do not get any specific error...
Any suggestion/fix available?

Thanks,have a good day
Reply With Quote
  #15  
Old 26 Oct 2005, 18:19
muf muf is offline
 
Join Date: Sep 2005
I am extremely sorry, but I cannot seem to reproduce your issues. I just went through all the steps on my newly upgraded 3.5.0 stable vBulletin, and I can successfully login SMF users. The only thing I can think of is your SMF forum might have been imported incorrectly.
Reply With Quote
Reply


Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
Mod Options

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts
Forum Jump


New To Site? Need Help?

All times are GMT. The time now is 12:06.

Layout Options | Width: Wide Color: