MyBB Tutorials

How to remove password encrpytion

Submitted by Blowjob, , Thread ID: 762

Thread Closed
Blowjob
Closed Account
Level:
0
Reputation:
26
Posts:
2.16K
Likes:
189
Credits:
2.53K
26-01-2015, 07:31 AM
#1
Here is a quick guide on how to remove the encryption method in MyBB.

Note: This is no recommended as it could be a security flaw having your passwords in plain text.
Education purposes only, or if you want to upgrade or change the encryption method.

Files used for encrpytion:
- inc/functions_user.php
- inc/datahandlers/user.php

What encrpytion method does MyBB use?:
MyBB's current encryption method as it currently stands is: md5(md5($salt).$password).

How to remove encryption:
1.Open inc/functions_user.php;
2.Find "return md5(md5($salt).$password);" (Line: 200);
3.Replace with "return $password;"
4.Find "if(salt_password(md5($password), $user['salt']) == $user['password'])" (Line: 135);
5.Replace with "if(salt_password($password, $user['salt']) == $user['password'])";
6.Save file, open "inc/datahandlers/user.php";
7.Find "$user['md5password'] = md5($user['password']);" (Line: 199);
8.Replace with "$user['md5password'] = $user['password'];";

RE: How to remove password encrpytion

26-01-2015, 08:59 AM
#2
Sweet man!, I can vouch for this!, I wouldn't recommend using it tho

RE: How to remove password encrpytion

AndresXZ09
Closed Account
Level:
0
Reputation:
30
Posts:
1.22K
Likes:
139
Credits:
1.51K
26-01-2015, 12:56 PM
#3
Not going to register on a MyBB forum ever again...

Hell, my security >.<

RE: How to remove password encrpytion

Aoki
retired
Level:
83
Reputation:
348
Posts:
7.89K
Likes:
2.3K
Credits:
1.7K
26-01-2015, 01:05 PM
#4
26-01-2015, 12:56 PM
AndresXZ09 Wrote:
Not going to register on a MyBB forum ever again...

Hell, my security >.<

It's encrypted here, don't worry. Tongue

RE: How to remove password encrpytion

Blowjob
Closed Account
Level:
0
Reputation:
26
Posts:
2.16K
Likes:
189
Credits:
2.53K
OP
26-01-2015, 02:43 PM
#5
26-01-2015, 01:05 PM
linkz Wrote:
26-01-2015, 12:56 PM
AndresXZ09 Wrote:
Not going to register on a MyBB forum ever again...

Hell, my security >.<

It's encrypted here, don't worry. Tongue

default encryption or modified?

RE: How to remove password encrpytion

Akay
We are!
Level:
0
Reputation:
28
Posts:
946
Likes:
109
Credits:
2.05K
26-01-2015, 07:49 PM
#6
Hack into a forum, and do this.
GG.
Smile

RE: How to remove password encrpytion

Blowjob
Closed Account
Level:
0
Reputation:
26
Posts:
2.16K
Likes:
189
Credits:
2.53K
OP
27-01-2015, 12:53 AM
#7
26-01-2015, 07:49 PM
Kewl Wrote:
Hack into a forum, and do this.
GG.
Smile

:yus: Exactly.

RE: How to remove password encrpytion

cute
Married to Yuun
Vixen
Level:
4
Reputation:
50
Posts:
523
Likes:
92
Credits:
1.09K
27-01-2015, 02:34 AM
#8
26-01-2015, 07:49 PM
Kewl Wrote:
Hack into a forum, and do this.
GG.
Smile

Pretty sure they'd notice when every password on the site stopped working. :fp:
[Image: ZtDsXXv.png]

RE: How to remove password encrpytion

Blowjob
Closed Account
Level:
0
Reputation:
26
Posts:
2.16K
Likes:
189
Credits:
2.53K
OP
27-01-2015, 02:37 AM
#9
27-01-2015, 02:34 AM
Unsuspicious Wrote:
26-01-2015, 07:49 PM
Kewl Wrote:
Hack into a forum, and do this.
GG.
Smile

Pretty sure they'd notice when every password on the site stopped working. :fp:

:noh: damn I thought some niqqa would fall for that

RE: How to remove password encrpytion

Calibre
Member
Level:
0
Reputation:
5
Posts:
115
Likes:
10
Credits:
128
27-01-2015, 02:42 AM
#10
Peeps can still use the password found via the change, right? Also you can force all users to change passwords via acp if I'm not mistaken.
Impress the best, stand out from the rest.

Users browsing this thread: 1 Guest(s)