The MD5 function (SHA, AES et similia) isn’t a encryption function but a “one-way” cryptographic hash function. An encryption function takes a plaintext (a discrete sequence of bytes), a password and encrypt the text creating another sequence of bytes called cipher text. The same function can be used (with some changes) to transform back the cipher text to plain text.
A cryptographic hash function instead creates a checksum that is a fixed-size string. It’s obviously a one-way process and bbPress, as well as any other software the stores password, use it to check if a password is valid.
http://en.wikipedia.org/wiki/Cryptographic_hash_function
http://en.wikipedia.org/wiki/Cryptographic_software
There are a lot of software that also store all the passwords (encrypted or not) in the database but it’s a potential security issue cause an attacker that gains temporary access to the data can retrieve all the passwords. In bbPress it’s “impossible.” I used the quotes cause MD5 is a very old hash function and it has been demostrated to be vulnerable to cryptanalysis.
The MD5 function (SHA, AES et similia) isn’t a encryption function but a “one-way” cryptographic hash function. An encryption function takes a plaintext (a discrete sequence of bytes), a password and encrypt the text creating another sequence of bytes called cipher text. The same function can be used (with some changes) to transform back the cipher text to plain text.
A cryptographic hash function instead creates a checksum that is a fixed-size string. It’s obviously a one-way process and bbPress, as well as any other software the stores password, use it to check if a password is valid.
http://en.wikipedia.org/wiki/Cryptographic_hash_function
http://en.wikipedia.org/wiki/Cryptographic_software
There are a lot of software that also store all the passwords (encrypted or not) in the database but it’s a potential security issue cause an attacker that gains temporary access to the data can retrieve all the passwords. In bbPress it’s “impossible.” I used the quotes cause MD5 is a very old hash function and it has been demostrated to be vulnerable to cryptanalysis.
@Gautam: right. So weird… If you have the default Permalinks and you change them it doesn’t work. But if you save again it does 
I guess the plugin will flush it itself in the future, right?
Ok, you need to actually go to the Permalinks page and press the Save Changes button to flush the rewrite rules.
Just registered a project on LaunchPad. Browser the source for index.php and tell me what you think 
https://launchpad.net/bbpress-mobile
Just registered a project on LaunchPad. Browser the source for index.php and tell me what you think
https://launchpad.net/bbpress-mobile
@alexvorn2 No but like @Gautam said I thought was not necesary 
@quicoto did you add the code
add_filter(‘init’,’flushRules’);
function flushRules(){
global $wp_rewrite;
$wp_rewrite->flush_rules();
}
in the bbp-functions.php ?
@Gautam @alexvorn2 Yup. I just changed the permalinks to /%postname%/ and still giving me a 404 error.
http://www.domain.com/forum/123-2/
@Gautam yeap, I like to see a Month and name permalink instead of the Default, by Default it’s ok but if I choose other, without the code I mentioned in the previous message it doesn’t work.
@alexvorn2
You just need to go to Permalinks page after activating the plugin to flush the rewrite rules.
hi everybody!
I downloaded the pre-alpha bbPress plugin and it doesn’t work 
I added some codes to bbpres-functions to make it work:
add_filter(‘init’,’flushRules’);
function flushRules(){
global $wp_rewrite;
$wp_rewrite->flush_rules();
}
and then I realized that the plugin is useless at this stage )))
ugh. this is tough.
Just found this comment from mdawaffe on the WordPress development blog:
mdawaffe 12:08 am on August 30, 2010 Permalink | Reply
There’s some bugs in bbPress. In some places it treats user_logins case sensitively, and in others case insensitively (and sometimes it depends on your DB’s collation).
http://wpdevel.wordpress.com/2010/08/27/i-upgraded-the-wp-org-plugins-directory/#comment-10009
ugh. this is tough.
Just found this comment from mdawaffe on the WordPress development blog:
mdawaffe 12:08 am on August 30, 2010 Permalink | Reply
There’s some bugs in bbPress. In some places it treats user_logins case sensitively, and in others case insensitively (and sometimes it depends on your DB’s collation).
http://wpdevel.wordpress.com/2010/08/27/i-upgraded-the-wp-org-plugins-directory/#comment-10009
Has anyone figured out how to include bbpress forum posts when using the WordPress site’s search form?
I migrated some users to bbPress and they are telling me that they get the following error when trying to login: User does not exist.
It turns out bbPress user IDs are case sensitive, so if the ID in the database is
Tipperary and the user types tipperary, it will not work.
Any way to circumvent this?
Sorry, I’m confused – either it is or isn’t.
As the user logs on regularly to bbPress they enter their user name and their password.
I presume that these are compared with the values in the database to enable logon. Either the given password is md5()’d or the database value is unencrypted to make this comparison.
As I have tried md5(‘mypass’) and it does not produce the same value as in the database something fishy is going on.
Sorry, I’m confused – either it is or isn’t.
As the user logs on regularly to bbPress they enter their user name and their password.
I presume that these are compared with the values in the database to enable logon. Either the given password is md5()’d or the database value is unencrypted to make this comparison.
As I have tried md5(‘mypass’) and it does not produce the same value as in the database something fishy is going on.
To put it simply I need to unhash / decrypt the password to reveal the current password in the database.
I have found this topic http://bbpress.org/forums/topic/cant-administer-my-site#post-73724
which indicates the password is md5 encoded
However testing md5(‘mypass’) in mysql5 produces a value quite different from the ‘mypass’ used in the bbPress table.
I have exactly the same problem as egonen did.
I uploaded a theme to my-templates, went to Appearance->Themes and sure enough there was the theme but with the alt text instead of the screenshot image.
On loading the forum, the css is not loading even though the href for the stylesheet is “http://mysite.com/bbpress/my-templates/my-theme/style.css”
I changed the my-template permissions to 755 as suggested, but still no styles.
Anyone got any more clues about this?
cheers,
RP
Tried downloading the latest from Trac but I got the “invalid header” error. I don’t think I’m gonna bother asking for support about these things, so I’d rather wait for an official alpha release that’s got the bare basics put together. Great job though
I want to remove few fields from my bbpress registration and profile edit page example website and occupation. How can I remove that fields? (Important)
When I replace bbpress registration page with wordpress registration then after the log off from bbpress site bbpress still show user profile content. It means cookies not working fine.
If I use Facebook connect plugin with wordpress and if I use wordpress registration page both for WP and bbpress can user connect with facebook and comment on bbpress?
Thanks
Further down the line, are you planning the structure the urls?
Will be about for that chat… might not be able to do much code wise sadly, but I’ll see how things go.
