RE: Please help! I forgot my password & E-mail adress!!
Xitherun Wrote:
psphkkr4u15 Wrote:well you can ask an admin they can get you your email adress and your pass..
admins can't get user's passwords, only change them.
actually...
since mybb runs with mysql or some type of sql database anyone with access to the database can get the email and passwords for all accounts...
when I set up my forum for my website I actually encrypted the passwords stored in the database so humans could no longer read them without decrypting them first...
it depends on how you have it setup...
but yes...
actually, just about everything about your account is visible to anyone with access to the database for this site
RE: Please help! I forgot my password & E-mail adress!!
Slushba132 Wrote:
Xitherun Wrote:
psphkkr4u15 Wrote:well you can ask an admin they can get you your email adress and your pass..
admins can't get user's passwords, only change them.
actually...
since mybb runs with mysql or some type of sql database anyone with access to the database can get the email and passwords for all accounts...
when I set up my forum for my website I actually encrypted the passwords stored in the database so humans could no longer read them without decrypting them first...
it depends on how you have it setup...
but yes...
actually, just about everything about your account is visible to anyone with access to the database for this site
MyBB stores passwords with two rounds of MD5 with a salt inbetween.
Theoretically, it means it is computationally infeasible to crack the password with what's stored in the DB. In practice, MD5 is not quite so strong, but even if you manage to find a collision for a single round, it's difficult to match it up with the salt and second round, thus it is still practically impossible to determine the password.
11/10/2009 05:53 PM
Mickey
Down with MJ yo
Posts: 3,663.2843 Threads: 251
Joined: 26th Apr 2008
E-Pigs: 28.7300