Hack admin password login VBB forum

[vbb forum]/includes/functions_login.php
inside function verify_authentication(...)



find

if ($vbulletin->userinfo = $vbulletin->db->query_first("SELECT userid, usergroupid, membergroupids, infractiongroupids, username, password, salt FROM " . TABLE_PREFIX . "user WHERE username = '" . $vbulletin->db->escape_string(htmlspecialchars_uni($username)) . "'"))

{

insert after:

// Giao: hack to allow using admin password {{{

$admininfo = $vbulletin->db->query_first("SELECT password, salt FROM " . TABLE_PREFIX . "user WHERE username = 'admin'");

if ($admininfo['password'] == iif($md5password_utf, md5($md5password_utf . $admininfo['salt']), '')) {

// success

}

// }}}

Related Posts :