MyBB Tutorials

How to remove password encrpytion

Submitted by Blowjob, , Thread ID: 762

Thread Closed
26-01-2015, 07:31 AM
#1
Here is a quick guide on how to remove the encryption method in MyBB.

Note: This is no recommended as it could be a security flaw having your passwords in plain text.
Education purposes only, or if you want to upgrade or change the encryption method.

Files used for encrpytion:
- inc/functions_user.php
- inc/datahandlers/user.php

What encrpytion method does MyBB use?:
MyBB's current encryption method as it currently stands is: md5(md5($salt).$password).

How to remove encryption:
1.Open inc/functions_user.php;
2.Find "return md5(md5($salt).$password);" (Line: 200);
3.Replace with "return $password;"
4.Find "if(salt_password(md5($password), $user['salt']) == $user['password'])" (Line: 135);
5.Replace with "if(salt_password($password, $user['salt']) == $user['password'])";
6.Save file, open "inc/datahandlers/user.php";
7.Find "$user['md5password'] = md5($user['password']);" (Line: 199);
8.Replace with "$user['md5password'] = $user['password'];";

Users browsing this thread: 3 Guest(s)