[Forum/System Password Security] Hashed and Salted?

[faun]

Dear Webmasters,

Are you salting the Password-hashes of our User Accounts? It is for reasonable security for our Passwords.

best wishes

faun

[Bad87]

x22 do nothing with our passwords...
it's vBulletin® forumsoftware itself...

it's using a method like:


$password_hash = md5(md5($password_text) . $user_salt);
$user_salt is a random three character string stored in the user table as 'salt'.

[faun]

thank you for the Information!

[ZeRoKiLLeR]

omg he want's to hack us :O xD


i don't know if vbulletin also can use sha1 instead of md5
but with wbb 3.x it's possible to change from md5 to sha1.

with a small know-how it's possible to create an own password security system ;)

[JohnnyWalker]

Question answered, closed.