Where is $salt

[Shamil.]

Hi, in which file is $salt defined? I'm trying to hook up a vB forum and a IPB forum using the external database authentication, and md5(md5($password)+$salt is the password hash isn't it?

Thanks

[Andy]

$salt is the licence number. You can locate your licence number at the beginning of the vbulletin php code.

$password come from the user table field password.

$var = md5($password . $salt);

$var would be the value stored in the forum cookie bbpassword.

[Shamil.]

I've just gone through the database, and there's a row in table user called salt, which is used in the login process according to the function_login.php Are you sure it's the license number?

[Andy]

I've just gone through the database, and there's a row in table user called salt, which is used in the login process according to the function_login.php Are you sure it's the license number?

As far as I know, $salt is the license number. I have no idea what the field salt is used for in the user table.

The example I provided is used by me to verify the cookie bbpassword matches what the user table shows for a password. This is useful for scripts when you want to make sure the user is the admin for example.

[Shamil.]

Ah right, ok thanks, let's see if this works
Nope, it failed:

Here's my code:

case 'vB':
$link = mysql_connect('localhost', 'user', 'pass');
mysql_select_db('db');
//$salt = mysql_query("SELECT salt FROM users WHERE username = '$remote_member'") ;
$salt = 'licno';
$check_pass = md5($password . $salt);
mysql_close($link);
break;

Anything wrong with it?

[Andy]

I'm trying to hook up a vB forum and a IPB forum using the external database authentication...

Might be helpful if you describe what you're trying to do in more detail.

[Shamil.]

Ok, I have an IPB forum, which allows external database authentication. Since the preset/preconfigured methods are non of those which math vB's settings, I am trying to build by own portion of the the script which authenticates the user for vBulletin to work.

[Zachery]

$salt is from user.salt.

I believe the stored database hash is something like this md5(md5(password) salt)