Users Password In Database

Results 1 to 10 of 10
  1. #1
    Zephyr Studios PRIZM is offline
    Grand MasterRank
    Feb 2012 Join Date
    DenmarkLocation
    2,291Posts

    talk Users Password In Database

    Well, i can't see the users passwords, because it's md5 encrypted, but is there any way i can make the code into the password?
    -A user can't remember her password, stupid blonde girl.


  2. #2
    *lurks* WJJ is offline
    Grand MasterRank
    May 2007 Join Date
    United KingdomLocation
    1,589Posts

    Re: Users Password In Database

    Im not sure if this would work:

    register a new account with a password like "test123" or something you can remember
    then go into your database and copy the MD5 code in the password box of the user you just registered
    put it in the password box of the account that shes forgotten and her password might changed to "test123"

    See if that works.

  3. #3
    Grand Master Glee is offline
    Grand MasterRank
    Jun 2009 Join Date
    Niagara Falls,Location
    2,225Posts

    Re: Users Password In Database

    What CMS are you using?

  4. #4
    Zephyr Studios PRIZM is offline
    Grand MasterRank
    Feb 2012 Join Date
    DenmarkLocation
    2,291Posts

    Re: Users Password In Database

    Quote Originally Posted by Glee View Post
    What CMS are you using?
    RevCMS - Blast template :)

  5. #5
    Elite Member Whale is offline
    Member +Rank
    Jun 2012 Join Date
    United KingdomLocation
    234Posts

    Re: Users Password In Database

    You could go into the database, copy the md5 code then go to MD5Decrypter.co.uk, Over 8.7 billion Decrypted Hashes, Free MD5 Decryptor, MD5 Cracker, MD5 Security Hacking
    then copy it that way to view the password.

  6. #6
    *lurks* WJJ is offline
    Grand MasterRank
    May 2007 Join Date
    United KingdomLocation
    1,589Posts

    Re: Users Password In Database

    Quote Originally Posted by daviid601 View Post
    You could go into the database, copy the md5 code then go to MD5Decrypter.co.uk, Over 8.7 billion Decrypted Hashes, Free MD5 Decryptor, MD5 Cracker, MD5 Security Hacking
    then copy it that way to view the password.
    I was going to suggest that, but im pretty sure the MD5 is salted which wouldnt work using this method.

    Will

  7. #7
    Resurrected Jam32 is offline
    Grand MasterRank
    Aug 2008 Join Date
    JamoniaLocation
    2,393Posts

    Re: Users Password In Database

    Quote Originally Posted by WJJ View Post
    I was going to suggest that, but im pretty sure the MD5 is salted which wouldnt work using this method.

    Will
    I've never had trouble decrypting Revcms' passwords. Some have failed, but most of the time the hashes are decrypt-able using an online free dcrypter!

  8. #8
    Zephyr Studios PRIZM is offline
    Grand MasterRank
    Feb 2012 Join Date
    DenmarkLocation
    2,291Posts

    Re: Users Password In Database

    Everyone thanks for helping!
    I've found the best site evar!
    MD5 Decrypt online

  9. #9
    Gamma Spamma Liam is offline
    Grand MasterRank
    Dec 2011 Join Date
    Down UnderLocation
    2,945Posts

    Re: Users Password In Database

    Infact site owners aren't allowed to view peoples passwords, it's just a privacy thing. But it's better to give them a password reset option.

  10. #10
    Member LordTrollthew is offline
    MemberRank
    Nov 2011 Join Date
    UKLocation
    33Posts

    Re: Users Password In Database

    Code a password reset function, e.g:

    - User enters email address into form
    - User receives an email (if the email address was valid) with a unique tokenised link to reset their password
    - User clicks the link and types their new password
    - User can then log in.

    Alternatively, code a password reset function in HK. It'd be the same as above, but admin initiated.

    There's no need to look in the database at all that way. :P

    Also, use bcrypt, not MD5/SHA1, etc.



Advertisement