Simple Machines Community Forum

SMF Support => SMF 2.0.x Support => Topic started by: shanksta13 on February 09, 2009, 01:33:44 PM

Title: Finding User Passwords?
Post by: shanksta13 on February 09, 2009, 01:33:44 PM
I have a quick question.  I am integrating my site with Joomla and a large Joomla community component (Community Builder).  Anyway, I need to manually create accounts for my current SMF users on my Joomla site and they need to have the same username and password.  The username is easy, as I can get that from the forum or the forum database.  However, the password is a little trickier since it is encoded in the database.  Is there anyway to decrypt the password into the normal plain text so that I can create the new user accounts on my Joomla installation?

If this is too sensitive to post for security reasons, could someone who knows PM me?
Title: Re: Finding User Passwords?
Post by: karlbenson on February 09, 2009, 01:34:35 PM
SMF passwords are sha1 salted
They are ONE-way encrypted. You can't reverse/undo/revert it.
Title: Re: Finding User Passwords?
Post by: shanksta13 on February 09, 2009, 01:39:34 PM
Quote from: regularexpression on February 09, 2009, 01:34:35 PM
SMF passwords are sha1 salted
They are ONE-way encrypted. You can't reverse/undo/revert it.

If I were to find out what encryption the Joomla database uses, would it be possible to convert from one ecryption to the other?
Title: Re: Finding User Passwords?
Post by: H on February 09, 2009, 01:41:56 PM
You cannot decrypt SMF passwords. They are hashed with sha1 and a salt.

If you search this site you will find information about integration with Joomla. While we no longer offer an official bridge due to Joomla's license, there are some unofficial ones you can use

If I were to find out what encryption the Joomla database uses, would it be possible to convert from one ecryption to the other?

Hashing is not encryption. You cannot convert between different hash algorithms
Title: Re: Finding User Passwords?
Post by: shanksta13 on February 09, 2009, 01:45:22 PM
Quote from: H on February 09, 2009, 01:41:56 PM
You cannot decrypt SMF passwords. They are hashed with sha1 and a salt.

If you search this site you will find information about integration with Joomla. While we no longer offer an official bridge due to Joomla's license, there are some unofficial ones you can use

If I were to find out what encryption the Joomla database uses, would it be possible to convert from one ecryption to the other?

Hashing is not encryption. You cannot convert between different hash algorithms

Yeah, I'm using a Joomla bridge already.  I guess I'll just have to have my members reset their passwords.  Cumbersome, but it will work.
Title: Re: Finding User Passwords?
Post by: Rumbaar on February 26, 2009, 09:01:35 PM
The bridge should handle all this automatically, as that is the whole purpose of a bridge.  Though I wasn't aware that there was a functional bridge for SMF 2.0.
Title: Re: Finding User Passwords?
Post by: H on February 27, 2009, 03:24:29 PM
Our Joomla bridge is no longer supported (due to licensing problems from the Joomla side) so I assume you're using one of the third-party bridges. I don't believe these are integrated quite as well as ours was.

You'll get the best experiences with our official bridges. Mambo and others are supported