Using bcrypt on your MyBB forum.

I highly recommend doing this on a local development copy of your forum.

Akay almost fucked up RF doing this lol :noh:

07-08-2015, 03:10 AM

Tropical Wrote: Akay almost fucked up RF doing this lol :noh:

And who cares?

07-08-2015, 08:09 AM

Aoki Wrote:

07-08-2015, 03:10 AM

Tropical Wrote: Akay almost fucked up RF doing this lol :noh:

And who cares?

OOOH got em:hurr:lol

Looks good.
I don't think it's really that much needed, but what do I know.

07-08-2015, 08:39 AM

Faded Wrote: but what do I know.

You know a lot of things:yus:

07-08-2015, 08:39 AM

Faded Wrote: Looks good.
I don't think it's really that much needed, but what do I know.

brb looking up your password hash and then bruteforcing your weakly hashed md5 password.. c:


bcrypt is slow, which makes it a great way to slow bruteforcing down.

I think I might have left something out in the code above. Gonna do this again tonight.

---

07-08-2015, 03:10 AM

Tropical Wrote: Akay almost fucked up RF doing this lol :noh:

Quote:I highly recommend doing this on a local development copy of your forum.

...

What does this thing do?

07-08-2015, 09:51 AM

Unsuspicious Wrote:

07-08-2015, 08:39 AM

Faded Wrote: Looks good.
I don't think it's really that much needed, but what do I know.

brb looking up your password hash and then bruteforcing your weakly hashed md5 password.. c:


bcrypt is slow, which makes it a great way to slow bruteforcing down.

I think I might have left something out in the code above. Gonna do this again tonight.

---

07-08-2015, 03:10 AM

Tropical Wrote: Akay almost fucked up RF doing this lol :noh:

Quote:I highly recommend doing this on a local development copy of your forum.

...

Thanks for clearing it up senpai.
pls don't try to bruteforce my pwd

07-08-2015, 10:00 AM

Gummy Wrote: What does this thing do?

Makes MyBB use the bcrypt hashing algorithm instead of the MD5 + Salt algorithm that it uses by default.

Here's a post by one of the members of my forum explaining it after I implemented it myself: