MuToolz in MD5 Encode

[yanivman]

MuToolz in MD5 Encode
Full credit to John-D!!!!

Requirements:
Access to MSSQL server ( preferably with SA account )
WZ_MD5_MOD.dll installed on the mssql Bin/Binn folder
working Mutoolz
STEP 1:

Go to query analyser


Quote:
USE master;
exec sp_addextendedproc 'XP_MD5_EncodeKeyVal', 'WZ_MD5_MOD.dll'


Quote:
use muonline;

Quote:
CREATE FUNCTION [dbo].[fn_md5] (@data TEXT, @data2 TEXT)
RETURNS BINARY(16) AS
BEGIN
DECLARE @hash BINARY(16)
EXEC master.dbo.XP_MD5_EncodeKeyVal @data, @data2, @hash OUTPUT
RETURN @hash
END

Run the Queries in Sequence

Then ur done with Query analyser.

STEP 2:
Modifying Mutoolz

register.php
find:

Quote:
'$POST[fname]', '$POST[pass1]','$POST[fname]'

there should be two of them inside the file.

Replace with:


Quote:
'$POST[fname]', [dbo].[fn_md5]('$POST[pass1]','$POST[fname]'),'$POST[fname]'


Mutoolz.tpl.php

find:

Quote:
and upper(memb__pwd) = upper(?) and

two of them inside the file.. 1 is under admin_checklogin function and the other is in user_checklogin function

change to or replace with:


Quote:
and memb__pwd = [dbo].[fn_md5](?,memb___id) and


i think that is it.. lolz...
there is another md5 encryption on the cookies and sessions.. completely different from the database ofcors.

EDIT: i didnt test it .. cause im not running a 99.watever server... go test it urself

[MentaL]

[Bigman]

Maybe a little explanation about what it does?

[Maurioski]

thx for the info.. ^^

thx John-D

[vladisls1]

what is this erro pls help here ...
[done]

Creating Configuration table...[done]

Importing initial data...[done]

Rebuilding mu_id ... [done]


Fatal error: Call to a member function on a non-object in C:\xampp\htdocs\xampp\MuArchon\install\install.php on line 380

[RifleMorre]

Very Very Nice :)

[adubius]

it gives me this error, i putted wz_md5.dll in sql\bin, can you help?

Server: Msg 2714, Level 16, State 7, Procedure sp_addextendedproc, Line 26
There is already an object named 'XP_MD5_EncodeKeyVal' in the database.

[warrior10]

guide update for MUToolz

1. restore me_muonline database (attached) - [customized me_muonline db]
2. edit mutoolz odbc - change mutoolz database from muonline to me_muonline
3. open query analyzer and run the script

USE Me_MuOnline
GO

if exists (select * from dbo.sysobjects where id = object_id(N'[dbo].[BLOCKING]') and OBJECTPROPERTY(id, N'IsUserTable') = 1)
drop table [dbo].[BLOCKING]
GO

if exists (select * from dbo.sysobjects where id = object_id(N'[dbo].[BLOCKING_LOG]') and OBJECTPROPERTY(id, N'IsUserTable') = 1)
drop table [dbo].[BLOCKING_LOG]
GO

if exists (select * from dbo.sysobjects where id = object_id(N'[dbo].[MEMB_DETA]') and OBJECTPROPERTY(id, N'IsUserTable') = 1)
drop table [dbo].[MEMB_DETA]
GO

if exists (select * from dbo.sysobjects where id = object_id(N'[dbo].[MEMB_INFO]') and OBJECTPROPERTY(id, N'IsUserTable') = 1)
drop table [dbo].[MEMB_INFO]
GO

if exists (select * from dbo.sysobjects where id = object_id(N'[dbo].[MEMB_STAT]') and OBJECTPROPERTY(id, N'IsUserTable') = 1)
drop table [dbo].[MEMB_STAT]
GO

CREATE TABLE [dbo].[BLOCKING] (
[block_guid] [int] IDENTITY (1, 1) NOT NULL ,
[memb_guid] [int] NOT NULL ,
[serv_guid] [int] NOT NULL ,
[char_name] [varchar] (20) NULL ,
[take_code] [char] (1) NOT NULL ,
[take_cont] [varchar] (1000) NOT NULL ,
[memb_cont] [varchar] (2000) NULL ,
[appl_days] [char] (8) NOT NULL ,
[rels_days] [char] (8) NOT NULL ,
[ctl1_code] [char] (1) NOT NULL
) ON [PRIMARY]
GO

CREATE TABLE [dbo].[BLOCKING_LOG] (
[appl_days] [datetime] NOT NULL ,
[admin_guid] [int] NOT NULL ,
[block_guid] [int] NOT NULL ,
[dist_code] [char] (2) NOT NULL ,
[admin_name] [varchar] (50) NOT NULL
) ON [PRIMARY]
GO

CREATE TABLE [dbo].[MEMB_DETA] (
[memb_guid] [int] NOT NULL ,
[desc_text] [varchar] (5000) NULL
) ON [PRIMARY]
GO

CREATE TABLE [dbo].[MEMB_INFO] (
[memb_guid] [int] IDENTITY (1, 1) NOT NULL ,
[memb___id] [varchar] (10) NOT NULL ,
[memb__pwd] [varbinary] (16) NOT NULL ,
[memb_name] [varchar] (10) NOT NULL ,
[sno__numb] [char] (13) NOT NULL ,
[post_code] [char] (6) NULL ,
[addr_info] [varchar] (50) NULL ,
[addr_deta] [varchar] (50) NULL ,
[tel__numb] [varchar] (20) NULL ,
[phon_numb] [varchar] (15) NULL ,
[mail_addr] [varchar] (50) NULL ,
[fpas_ques] [varchar] (50) NULL ,
[fpas_answ] [varchar] (50) NULL ,
[job__code] [char] (2) NULL ,
[appl_days] [datetime] NULL ,
[modi_days] [datetime] NULL ,
[out__days] [datetime] NULL ,
[true_days] [datetime] NULL ,
[mail_chek] [char] (1) NULL ,
[bloc_code] [char] (1) NOT NULL ,
[ctl1_code] [char] (1) NOT NULL
) ON [PRIMARY]
GO

CREATE TABLE [dbo].[MEMB_STAT] (
[memb___id] [varchar] (10) NOT NULL ,
[ConnectStat] [tinyint] NULL ,
[ServerName] [varchar] (10) NULL ,
[IP] [varchar] (15) NULL ,
[ConnectTM] [smalldatetime] NULL ,
[DisConnectTM] [smalldatetime] NULL
) ON [PRIMARY]
GO

ALTER TABLE [dbo].[BLOCKING] WITH NOCHECK ADD
CONSTRAINT [PK_BLOCKING] PRIMARY KEY CLUSTERED
(
[block_guid]
) ON [PRIMARY]
GO

ALTER TABLE [dbo].[BLOCKING_LOG] WITH NOCHECK ADD
CONSTRAINT [PK_BLOCKING_LOG] PRIMARY KEY CLUSTERED
(
[appl_days] DESC ,
[admin_guid] DESC ,
[dist_code] DESC
) ON [PRIMARY]
GO

ALTER TABLE [dbo].[MEMB_STAT] WITH NOCHECK ADD
CONSTRAINT [PK_MEMB_STAT] PRIMARY KEY CLUSTERED
(
[memb___id]
) ON [PRIMARY]
GO

CREATE CLUSTERED INDEX [IX_MEMB_INFO_1] ON [dbo].[MEMB_INFO]([memb___id] DESC ) WITH FILLFACTOR = 70 ON [PRIMARY]
GO

ALTER TABLE [dbo].[BLOCKING] ADD
CONSTRAINT [DF_BLOCKING_ctl1_code] DEFAULT (5) FOR [ctl1_code]
GO

CREATE INDEX [IX_BLOCKING] ON [dbo].[BLOCKING]([char_name] DESC , [take_code] DESC , [appl_days] DESC , [rels_days] DESC ) ON [PRIMARY]
GO

ALTER TABLE [dbo].[MEMB_INFO] ADD
CONSTRAINT [DF_MEMB_INFO_mail_chek] DEFAULT (0) FOR [mail_chek],
CONSTRAINT [PK_MEMB_INFO_1] PRIMARY KEY NONCLUSTERED
(
[memb_guid] DESC
) ON [PRIMARY]
GO

CREATE INDEX [IX_MEMB_DETAIL] ON [dbo].[MEMB_INFO]([sno__numb] DESC , [memb_name] DESC ) ON [PRIMARY]
GO

ALTER TABLE [dbo].[MEMB_DETA] ADD
CONSTRAINT [FK_MEMB_DETA_MEMB_INFO] FOREIGN KEY
(
[memb_guid]
) REFERENCES [dbo].[MEMB_INFO] (
[memb_guid]
)
GO


if exists (select * from dbo.sysobjects where id = object_id(N'[dbo].[USP_Block_CanCel]') and OBJECTPROPERTY(id, N'IsProcedure') = 1)
drop procedure [dbo].[USP_Block_CanCel]
GO

if exists (select * from dbo.sysobjects where id = object_id(N'[dbo].[WZ_CONNECT_MEMB]') and OBJECTPROPERTY(id, N'IsProcedure') = 1)
drop procedure [dbo].[WZ_CONNECT_MEMB]
GO

if exists (select * from dbo.sysobjects where id = object_id(N'[dbo].[WZ_DISCONNECT_MEMB]') and OBJECTPROPERTY(id, N'IsProcedure') = 1)
drop procedure [dbo].[WZ_DISCONNECT_MEMB]
GO

SET QUOTED_IDENTIFIER ON
GO
SET ANSI_NULLS ON
GO

--=======================================================================--
--

[skurbold]

MuToolz in MD5 Encode
Full credit to John-D!!!!

Requirements:
Access to MSSQL server ( preferably with SA account )
WZ_MD5_MOD.dll installed on the mssql Bin/Binn folder
working Mutoolz
STEP 1:

Go to query analyser


Quote:
USE master;
exec sp_addextendedproc 'XP_MD5_EncodeKeyVal', 'WZ_MD5_MOD.dll'


Quote:
use muonline;

Quote:
CREATE FUNCTION [dbo].[fn_md5] (@data TEXT, @data2 TEXT)
RETURNS BINARY(16) AS
BEGIN
DECLARE @hash BINARY(16)
EXEC master.dbo.XP_MD5_EncodeKeyVal @data, @data2, @hash OUTPUT
RETURN @hash
END

Run the Queries in Sequence

Then ur done with Query analyser.

STEP 2:
Modifying Mutoolz

register.php
find:

Quote:
'$POST[fname]', '$POST[pass1]','$POST[fname]'

there should be two of them inside the file.

Replace with:


Quote:
'$POST[fname]', [dbo].[fn_md5]('$POST[pass1]','$POST[fname]'),'$POST[fname]'


Mutoolz.tpl.php

find:

Quote:
and upper(memb__pwd) = upper(?) and

two of them inside the file.. 1 is under admin_checklogin function and the other is in user_checklogin function

change to or replace with:


Quote:
and memb__pwd = [dbo].[fn_md5](?,memb___id) and


i think that is it.. lolz...
there is another md5 encryption on the cookies and sessions.. completely different from the database ofcors.

EDIT: i didnt test it .. cause im not running a 99.watever server... go test it urself

ERROR:


Fatal error: Call to a member function fetchRow() on a non-object in C:\Arquivos de programas\xampp\htdocs\install\install.php on line 380

[Frost1n]

It

[Xeron]

wtf that didnt work for me

[Xeron]

doesn't work for me

[Xeron]

btw use "[Quote]" without the quotes

[Nocturnal]

ohh thats cute

[parsy]

What to do whi this ERROR:
Fatal error: Call to a member function fetchrow() on a non-object in C:\root\_libs\header.php on line 53

[Musee]

can someone test this please

[Musee]

can you give me the fix one so i can use it

[zolamu]

this is work

[HELL_IN_HEAVEN]

Fatal error: Call to a member function on a non-object in c:\appserv\www\_libs\server.php on line 22


got this error..

[KEMBL]

All seems, that we have got more great other problem with XP_MD5_EncodeKeyVal self on several md5 version MU servers: http://forum.ragezone.com/post1459907.html

[-DeniedKiD-]

I'm testing right now the files.