Hello all

Could you tell me which security type bbpress uses for password protection? Is it md5 and salt or something else. Also, in which file is the code located?

I’m working an integration with my own site – it’s not WP or any other. It is php that I have created.

Thanks in advance

[@zaerl Participant 14 years, 4 months ago]

md5 checksum stored in the user_pass column of database table bb_users. No salt.

[@pedagog Member 14 years, 4 months ago]

Thanks zaerl. However, what I meant was where is the code that converts the ‘raw’ password into the md5 hash. I know where it stores the hased password.

Sorry for the confusion.

[@zaerl Participant 14 years, 4 months ago]

Ah ok. Let’s backtrace:

bb_new_user

$wp_users_object->new_user

WP_users::_put_user

WP_Pass::hash_password

$wp_hasher->HashPassword

PasswordHash::crypt_private

file bb-include/backpress/class.passwordhash.php line 113. The original comment:

# We’re kind of forced to use MD5 here since it’s the only

# cryptographic primitive available in all versions of PHP

which is true.

[@pedagog Member 14 years, 4 months ago]

Thanks zaerl, I’ll take a look at it now.