• Registered: 2010-01-15
  • Posts: 11

Topic: NO encryption in users passwords.

Hi all,

I don't want any encryption in the password of any user in the MySQL database.

// In MySQL:

password = the real password;
salt = nothing;

// In fact, I wanna remove "salt".

What files should I edit to change this? (When the user create an account, it will create it in database without encryption, and when user login, it should open his account without problems).

Is that hard, possible? Can someone help me please?

I want this, because I try to link my litle game (MMORPG) with the Forum, but the encryption is causing me problems. I don't want it, its slow and useless in my opinion. (Nobody gonna hack my server anyway tongue)

Please help, and Thanks.

  • From: Russia
  • Registered: 2008-07-22
  • Posts: 713

Re: NO encryption in users passwords.

reacen wrote:

its slow

A hash of a short string like a password can be calculated very fast.

PunBB team intentions, personal tasks.

Parpalak's Website

  • From: Russia
  • Registered: 2008-07-22
  • Posts: 713

Re: NO encryption in users passwords.

And if you really want to disable password hashing try to edit the forum_hash() function. Seems like it should be just 

return $str;
PunBB team intentions, personal tasks.

Parpalak's Website

  • Registered: 2010-01-15
  • Posts: 11

Re: NO encryption in users passwords.

Its working great when the user registre, thanks! ("Salt" is not empty, but never minde...)
The only problem now is, when you try to login:  "Incorrect username and/or password."  yikes

What to do for this login issue?

  • From: Russia
  • Registered: 2008-07-22
  • Posts: 713

Re: NO encryption in users passwords.

Try to replace the following line (login.php, line 54)

$sha1_in_db = (strlen($db_password_hash) == 40) ? true : false;

to

$sha1_in_db = true;
PunBB team intentions, personal tasks.

Parpalak's Website

  • Registered: 2010-01-15
  • Posts: 11

Re: NO encryption in users passwords.

Its working great !  big_smile
Now, I just hope these few changes will not cause future problems with the forum. roll

Thank you so much Parpalak.

  • From: Russia
  • Registered: 2008-07-22
  • Posts: 713

Re: NO encryption in users passwords.

You're welcome.

Do not forget to make these changes again when the new version of PunBB is released and you update it.

PunBB team intentions, personal tasks.

Parpalak's Website