Post: #1

Im not great with php but I would like to know how the login system work. Is it just a basic md5 encryption for the password? I'm trying to integrate the login system with an asp.net application and all i need is the login system. Any help with how the login system works would be great. If I can't get the login system to work I'll just make my own but since the asp.net system is for the same site i use for mybb on just for a different feature, I really don't want my users to have to login into two different systems.

Post: #2

The password is made up of an md5 hashed salt, followed by an md5 hashed version of the actual password. This string is then all hashed. Maybe the following code example will help:


This isn't an exact example from the MyBB code, but that's how it works in essence Hopefully it helps.

Post: #3

I really havent had time to look but is the salt different for every user? if so is it stored in the database for that user? If so I'd basically only have to pull the salt with a query then md5 it then md5 the password and the login should work correct?

Post: #4

Yeah, it's stored in the mybb_users table (in an md5 hashed format) along with an md5 hash of the password But yes, that should be correct - especially if you're following my quick example.