[pedagog]

Hello all

Could you tell me which security type bbpress uses for password protection? Is it md5 and salt or something else. Also, in which file is the code located?

I’m working an integration with my own site – it’s not WP or any other. It is php that I have created.

Thanks in advance

[zaerl]

md5 checksum stored in the user_pass column of database table bb_users. No salt.

[pedagog]

Thanks zaerl. However, what I meant was where is the code that converts the ‘raw’ password into the md5 hash. I know where it stores the hased password.

Sorry for the confusion.

[zaerl]

Ah ok. Let’s backtrace:

bb_new_user

$wp_users_object->new_user

WP_users::_put_user

WP_Pass::hash_password

$wp_hasher->HashPassword

PasswordHash::crypt_private

file bb-include/backpress/class.passwordhash.php line 113. The original comment:

# We’re kind of forced to use MD5 here since it’s the only

# cryptographic primitive available in all versions of PHP

which is true.

[pedagog]

Thanks zaerl, I’ll take a look at it now.