Topic: Password Protection Method – bbpress? · bbPress.org

Skip to:: Content; Pages; Categories; Search; Top; Bottom

Password Protection Method – bbpress?

pedagog
Member

@pedagog

14 years, 3 months ago

Hello all

Could you tell me which security type bbpress uses for password protection? Is it md5 and salt or something else. Also, in which file is the code located?

I’m working an integration with my own site – it’s not WP or any other. It is php that I have created.

Thanks in advance

Viewing 4 replies - 1 through 4 (of 4 total)

zaerl
Participant

@zaerl

14 years, 3 months ago

md5 checksum stored in the user_pass column of database table bb_users. No salt.

pedagog
Member

@pedagog

14 years, 3 months ago

Thanks zaerl. However, what I meant was where is the code that converts the ‘raw’ password into the md5 hash. I know where it stores the hased password.

Sorry for the confusion.
zaerl
Participant

@zaerl

14 years, 3 months ago
Ah ok. Let’s backtrace:
```
bb_new_user

$wp_users_object->new_user

WP_users::_put_user

WP_Pass::hash_password

$wp_hasher->HashPassword

PasswordHash::crypt_private
```
file bb-include/backpress/class.passwordhash.php line 113. The original comment:

# We’re kind of forced to use MD5 here since it’s the only

# cryptographic primitive available in all versions of PHP

which is true.
pedagog
Member

@pedagog

14 years, 3 months ago

Thanks zaerl, I’ll take a look at it now.

Viewing 4 replies - 1 through 4 (of 4 total)

You must be logged in to reply to this topic.