Register Members List Search Today's Posts Mark Forums Read

Reply
 
Thread Tools
  #1  
Old 31 Dec 2012, 05:41
Hiatus- Hiatus- is offline
 
Join Date: Dec 2012
VB Passwords with other programs

Hello, I am currently coding a program and I want my website users to be able to use their forums information to log into the program. The problem I ran into was with the passwords. How would I correctly pull the passwords from the vb database to use in my program (the hash is what makes it difficult). Also I am programming in c#. Any help would be very appreciated.


Thanks.
Reply With Quote
  #2  
Old 31 Dec 2012, 09:28
Carnage Carnage is offline
 
Join Date: Jan 2005
you might find yourself better off using the mobile api
__________________
www.giveupalready.com

If you want/need to contact me, best thing is to pm me on that site, username Carnage.
Reply With Quote
  #3  
Old 31 Dec 2012, 13:11
kh99 kh99 is offline
 
Join Date: Aug 2009
Real name: Kevin
In case it helps, what's stored in the vb user table password field is md5(md5(password) . salt)), where 'password' is the user's password and 'salt' is the value from the 'salt' field from the user table.
Reply With Quote
  #4  
Old 31 Dec 2012, 14:17
Hiatus- Hiatus- is offline
 
Join Date: Dec 2012
Originally Posted by Carnage View Post
you might find yourself better off using the mobile api
what exactly do you mean by this?

--------------- Added 31 Dec 2012 at 17:14 ---------------

Also, I got it working with the algorithm that kh posted. Thank you for the help
Reply With Quote
  #5  
Old 01 Jan 2013, 11:09
Carnage Carnage is offline
 
Join Date: Jan 2005
Originally Posted by Hiatus- View Post
what exactly do you mean by this?

--------------- Added 31 Dec 2012 at 17:14 ---------------

Also, I got it working with the algorithm that kh posted. Thank you for the help
Well, the C# program you are writing is external to the forums, ideally you wouldn't give it direct access to your vbulletin database. If you use the API that the mobile apps use you will have a more secure way to authenticate a user against your forum's database.

If you intend to distribute the program to anyone if it has direct access to the database, it will present a massive security issue. (Somewhere the program will need your database credentials, allowing a malicious user to obtain them from it)
__________________
www.giveupalready.com

If you want/need to contact me, best thing is to pm me on that site, username Carnage.
Reply With Quote
Reply



Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 
Thread Tools

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off


New To Site? Need Help?

All times are GMT. The time now is 23:49.

Layout Options | Width: Wide Color: