[release vb2] Database Password Encryption

[dabean]

Updated 15th July 2001
Simplish hack that allows end users to chose if they want to store encrypted versions of their password.

Full details of how this is implemented are contained in the file.
Requirements:
vBulletin 2.0.0
This has not been tested on rc1/2/3 beta1-5. It might work or it might not.

From the june 3rd update onwards a installation script is included, full details in the instructions.

[kicks]

I'll have to check this out, but it sounds very interesting

[mrlister]

this is auctually really good. it would be a lot better if vBulletin came with this. I hate people that just use phpMyAdmin and look at your passwords.

[rebby]

sweet!!!

[Freddie Bingham]

We will consider switching to encrypted passwords in the future.

[rebby]

Originally posted by freddie
We will consider switching to encrypted passwords in the future.

please do... plain text passwords is one of the only things that i don't like about vb.

[mrlister]

plain text passwords is the only reason why i have to memorize so many different passwords for each vB i sign up with.

[kicks]

Originally posted by mrlister
plain text passwords is the only reason why i have to memorize so many different passwords for each vB i sign up with.

heh, you too?

[kdog316]

dabean can you explain exactly to me how i do this part

ALTER TABLE user ADD encryptedpass SMALLINT DEFAULT '0' not null
CREATE TABLE passgen (requesthash char(32) NOT NULL, userid int(10) unsigned DEFAULT '0' NOT NULL, requestedtime int(10) unsigned DEFAULT '0' NOT NULL)

[tubedogg]

Just a suggestion - stick your instructions and this file into a zip and put it up instead of just your text file. It's MySQL made easy.

Rename this file to dbencrypt.php, stick it in your admin directory and go to it in a browser - login like you would to your Admin CP and then it'll do the queries and link you to your Admin CP.

[kdog316]

does the dbencrypt.php do all the table altering and replacing of the other php files for me

[dabean]

Updated: (15:05 BST)

Improvements:
- Database update script, delete it after using it. Thanks tubedogg but i'd already writen my own to go with this improved version.
- Encypted passwords option at registration

Bug fixes:
- Members can no longer follow a password regeneration link more than once.

[kdog316]

i ran the encyption file but i dont see any make password encrypted field on registering

[dabean]

As the text file "password_encryption.txt" contained in the zip states all the installer does it make the database changes for you. You still have to modify the code and templates by following the instructions in the file.

[kdog316]

ok something wrong is going on here when ever i edit my member.php file the way you say i get this error when i try to access my change password, edit options or any thing else that has to do with the user profile and this is the error

Fatal error: Call to undefined function: getuserinfo() in /home/photo/public_html/tmbps/member.php on line 101

and here is line 101 on member.php

    $bbuserinfo=getuserinfo($userid);