MyBB Tutorials

Using bcrypt on your MyBB forum.

Submitted by cute, , Thread ID: 8621

Thread Closed
cute
Married to Yuun
Vixen
Level:
4
Reputation:
50
Posts:
523
Likes:
92
Credits:
1.09K
06-08-2015, 01:17 PM
#1
I highly recommend doing this on a local development copy of your forum.

Content locked
This content has been locked. Please login or register in order to unlock it.
[Image: ZtDsXXv.png]

RE: Using bcrypt on your MyBB forum.

Aoki
retired
Level:
83
Reputation:
348
Posts:
7.89K
Likes:
2.3K
Credits:
1.7K
07-08-2015, 08:09 AM
#3
07-08-2015, 03:10 AM
Tropical Wrote:
Akay almost fucked up RF doing this lol :noh:

And who cares?

RE: Using bcrypt on your MyBB forum.

Gummy
Verified Rad Pirate Dad
Supreme
Level:
4
Reputation:
60
Posts:
1.38K
Likes:
85
Credits:
44
07-08-2015, 08:32 AM
This post was last modified: 07-08-2015, 08:32 AM by Gummy
#4
07-08-2015, 08:09 AM
Aoki Wrote:
07-08-2015, 03:10 AM
Tropical Wrote:
Akay almost fucked up RF doing this lol :noh:

And who cares?

OOOH got em:hurr:lol
[Image: giphy.gif]

RE: Using bcrypt on your MyBB forum.

Faded
Legend
Level:
21
Reputation:
215
Posts:
10.2K
Likes:
1.12K
Credits:
15K
07-08-2015, 08:39 AM
#5
Looks good.
I don't think it's really that much needed, but what do I know.
[Image: InZ3hGx.png]

RE: Using bcrypt on your MyBB forum.

Gummy
Verified Rad Pirate Dad
Supreme
Level:
4
Reputation:
60
Posts:
1.38K
Likes:
85
Credits:
44
07-08-2015, 08:44 AM
#6
07-08-2015, 08:39 AM
Faded Wrote:
but what do I know.

You know a lot of things:yus:
[Image: giphy.gif]

RE: Using bcrypt on your MyBB forum.

cute
Married to Yuun
Vixen
Level:
4
Reputation:
50
Posts:
523
Likes:
92
Credits:
1.09K
OP
07-08-2015, 09:51 AM
This post was last modified: 07-08-2015, 09:52 AM by cute
#7
07-08-2015, 08:39 AM
Faded Wrote:
Looks good.
I don't think it's really that much needed, but what do I know.

brb looking up your password hash and then bruteforcing your weakly hashed md5 password.. c:


bcrypt is slow, which makes it a great way to slow bruteforcing down.

I think I might have left something out in the code above. Gonna do this again tonight.

07-08-2015, 03:10 AM
Tropical Wrote:
Akay almost fucked up RF doing this lol :noh:

Quote:I highly recommend doing this on a local development copy of your forum.

...
[Image: ZtDsXXv.png]

RE: Using bcrypt on your MyBB forum.

Gummy
Verified Rad Pirate Dad
Supreme
Level:
4
Reputation:
60
Posts:
1.38K
Likes:
85
Credits:
44
07-08-2015, 10:00 AM
#8
What does this thing do?
[Image: giphy.gif]

RE: Using bcrypt on your MyBB forum.

Faded
Legend
Level:
21
Reputation:
215
Posts:
10.2K
Likes:
1.12K
Credits:
15K
07-08-2015, 10:07 AM
#9
07-08-2015, 09:51 AM
Unsuspicious Wrote:
07-08-2015, 08:39 AM
Faded Wrote:
Looks good.
I don't think it's really that much needed, but what do I know.

brb looking up your password hash and then bruteforcing your weakly hashed md5 password.. c:


bcrypt is slow, which makes it a great way to slow bruteforcing down.

I think I might have left something out in the code above. Gonna do this again tonight.

07-08-2015, 03:10 AM
Tropical Wrote:
Akay almost fucked up RF doing this lol :noh:

Quote:I highly recommend doing this on a local development copy of your forum.

...

Thanks for clearing it up senpai.
pls don't try to bruteforce my pwd
[Image: InZ3hGx.png]

RE: Using bcrypt on your MyBB forum.

cute
Married to Yuun
Vixen
Level:
4
Reputation:
50
Posts:
523
Likes:
92
Credits:
1.09K
OP
07-08-2015, 10:13 AM
#10
07-08-2015, 10:00 AM
Gummy Wrote:
What does this thing do?

Makes MyBB use the bcrypt hashing algorithm instead of the MD5 + Salt algorithm that it uses by default.

Here's a post by one of the members of my forum explaining it after I implemented it myself:
[Image: 2f9e27089085b23ce910c59e642ba7df.png]
[Image: ZtDsXXv.png]

Users browsing this thread: 1 Guest(s)