ProBoard's Password Proection method

[Phrate]

Alright, so I'm wondering what method PB uses to secure its passwords. I'm thinking it uses something similar to the salt method?

$Pass = md5(($Pass.$Salt).$Salt);
Where the $Salt is a randomized string. I've always used this method as it would take someone absolute years to get anywhere close to finding all the right prefixes and correct letters, and even then they'd have heck with the salt.

[Michael]

I highly doubt you'll find it out ... but I doubt it's salted to be honest. There's no real need for them to salt the password.

Although I could be wrong.

[Phrate]

Well, it's not that I want them to directly tell me, I just wanted an idea.

And, why would it be so bad for them to salt it? It's insanely effective.

[Charles Stover]

They use the encrypt function with v4 as the salt, last I checked.

[Chris]

Nov 19, 2009 19:50:02 GMT -8 Charles Stover said:

They use the encrypt function with v4 as the salt, last I checked.

It was something like that. Might have been "pbv4" instead. And is it encrypt or crypt? (They might be the same... I don't mess with them often enough.)

[Charles Stover]

Oh, yes, it's called crypt. The salt is v4, though.