Site Links
Home
Features
Documentation
Pricing & Order
Members Area
Support Options
Who's Online
2 registered (driv, Ruben Rocha), 25 Guests and 20 Spiders online.
Key: Admin, Global Mod, Mod
Featured Member
Registered: 01/29/08
Posts: 20
Top Posters (30 Days)
Ruben Rocha 159
Rick 116
Gizmo 104
Thelockman 61
driv 50
AllenAyres 38
ScriptKeeper 32
Mark S 30
Ian 30
ntdoc 24
Latest Photos
My Home System
test photo gallery
Bernese Mountain Dogs
My Daimler
Dorado and shark
Topic Options
Rate This Topic
#171764 - 12/30/06 06:16 PM Viewability of users' passwords
bs1979 Offline
stranger

Registered: 12/30/06
Posts: 1
Can an admin see user passwords in plain text?

Thanks in advance. \:\)

Top
#171765 - 12/30/06 06:17 PM Re: Viewability of users' passwords [Re: bs1979]
Rick Administrator Offline

*****

Registered: 06/04/06
Posts: 7883
Loc: Aberdeen, WA
No, all passwords are stored in the database in MD5 format which cannot be decrypted.
_________________________
UBB.threads™ Developer
My Personal Website · StogieSmokers.com

Top
#171768 - 12/30/06 06:30 PM Re: Viewability of users' passwords [Re: Rick]
Gizmo Moderator Offline

***

Registered: 06/04/06
Posts: 11968
Loc: Portland, OR; USA
It's also good to state that storing passwords in plain text could be a security issue (in several ways), encoding in MD5 is at least better than leaving it as plain text.
_________________________
UGN Security, Elite Web Gamers & VNC Web Design Owner
Longtime UBB Supporter, UBB7 Beta Tester & Resident Post-A-Holic

Top
#171794 - 12/30/06 09:32 PM Re: Viewability of users' passwords [Re: Rick]
ntdoc Offline

***

Registered: 11/08/06
Posts: 3193
 Quote:
which cannot be decrypted


hmmmm... care to make a wager on that Rick ;\)

LOL - Okay, in general it is safe, but not uncrackable.

.

Top
#171800 - 12/30/06 09:40 PM Re: Viewability of users' passwords [Re: ntdoc]
Gizmo Moderator Offline

***

Registered: 06/04/06
Posts: 11968
Loc: Portland, OR; USA
MD5 cannot be decrypted, however the hash can be compared against a hash database; which is why I recommend using a dual salt when MD5'ing anything :nods:
_________________________
UGN Security, Elite Web Gamers & VNC Web Design Owner
Longtime UBB Supporter, UBB7 Beta Tester & Resident Post-A-Holic

Top
#171805 - 12/30/06 09:43 PM Re: Viewability of users' passwords [Re: Gizmo]
ntdoc Offline

***

Registered: 11/08/06
Posts: 3193
Well actually I'd have to find the link but just about 2 monts ago I was reading where it can and was, but for now since I don't have the link I'll stand down on it \:p

But if I find the link I'll be back to say so.

Regardless, just a matter of time.

Top
#171820 - 12/30/06 09:51 PM Re: Viewability of users' passwords [Re: ntdoc]
Gizmo Moderator Offline

***

Registered: 06/04/06
Posts: 11968
Loc: Portland, OR; USA
I'd love to see it, I've not heard of anyway to decrypt an MD5 hash, I know it's not secure if unsalted as there are tons of hash comparison sites, but it goes a long way...
_________________________
UGN Security, Elite Web Gamers & VNC Web Design Owner
Longtime UBB Supporter, UBB7 Beta Tester & Resident Post-A-Holic

Top


Shout Box

Today's Birthdays
Eric Flyxe, mark_l_88@yahoo.com
Recent Topics
restricting a media tag to a single forum...
by bakerzdosen
11/21/08 12:52 PM
Recover topics??
by femistyle
11/21/08 12:22 PM
duplicate entries in viewmessage.php lang file (7.4.1)
by alnadabi
11/21/08 05:54 AM
Order of variables in language files should be permanent
by alnadabi
11/21/08 05:12 AM
How do I set Moderation Queue for an individual user?
by luket
11/20/08 11:28 AM
Forum Stats
4249 Members
33 Forums
30488 Topics
154665 Posts

Max Online: 978 @ 06/24/07 08:19 PM