Hello
What changed the password to the user a way, what a way to know the password
How to change the user's password.
Hello
What changed the password to the user a way, what a way to know the password
How to change the user's password.
“How to change the user's password.”
Every user has its own file in your users folder. The filename is an sha512 hash of the lowercase version of whatever the user’s name is. Inside the file you will find an sha512 hash of the user’s password (salted with the user’s name hash).
As the forum admin you have access to the files on the server and can just swap out the hash with a new one.
As a hint, there are plenty of websites that can help you hash strings. DuckDuckGo even has it built-in: https://duckduckgo.com/?q=sha512+Test
Thank you so much
Excellent know that the file name is sha512
Example: name admin *.TXT
C7AD44CBAD762A5DA0A452F9E854FDC1E0E7A52A38015F23F3EAB1D80B931DD472634DFAC71CD34EBC35D16AB7FB8A90C81F975113D6C7538DC69DD8DE9077EC.TXT
Within a file *.TXT
There is this:
ef24d51df3f557ba6f3a86f4aeb3aaa628abc03f6eed3426930ea8d9ad728d34e4ec53ec8e148a75c2332ee9e53d89eaacacb81f34dce18eac70cace3a95d183
This is no encryption.
And password did not understand what is encrypted Type.
“This is no encryption.”
No, it is a hash, not even a very secure one 😉
Your example is right, user `admin`
would have their password stored in `c7ad44cbad762a5da0a452f9e854fdc1e0e7a52a38015f23f3eab1d80b931dd472634dfac71cd34ebc35d16ab7fb8a90c81f975113d6c7538dc69dd8de9077ec.txt`
.
The password is hashed together with the username hash, using this code:
% from start.php hash ('sha512', $name.PASS) %
So if the user `admin`
has the word `admin`
as password this is hashed like:
`c7ad44cbad762a5da0a452f9e854fdc1e0e7a52a38015f23f3eab1d80b931dd472634dfac71cd34ebc35d16ab7fb8a90c81f975113d6c7538dc69dd8de9077ecadmin`
→ `cf0f0304684d2f9dd35bd544c01a93087c6e1d8b441996aa0dcc91291a79dfd2fcb2861df8bdd92c2216c4a1c2ba194e42439d91e4f96a2449af0f91aa5a1d96`
I hope that explain it!
Thank you very much now I understand correctly.
I thank succeeded in changing the password and user name, and I understood it perfectly
user: 2015
f620ea9ab05df05bb794a2add59a984419bcb1b76168eb7b5089e5f44d117d965f634c9a3cb48f5cbb6da5c04a1484b6e684a944e887b66aad5ddbdd6e32568d
Password: 2015
5bca3969d620c90e6eb90bd140338a94607dbc10246b265025cef50ef6e1d30614052aab8d959883072f1585831e728c0151ea8f4419ba89bde560deb3a6be6c
Your friendly neighbourhood moderators: Kroc, Impressed, Martijn