Simple Machines Community Forum

SMF Support => Converting to SMF => vBulletin => Topic started by: Ardii on May 11, 2011, 10:37:28 AM

Title: Password security has recently been upgraded. Please enter your password again.
Post by: Ardii on May 11, 2011, 10:37:28 AM
I have a problem with password of user from the last converting that i did.
I convert vbulletin 3.8.5 to smf RC5 , everything has go okay in converting but the problem is when I go to login with my old username and password ,shows me this : Password security has recently been upgraded. Please enter your password again.

What to do , have anyone any answer how to solve this problem?
Title: Re: Password security has recently been upgraded. Please enter your password again.
Post by: Aleksi "Lex" Kilpinen on May 11, 2011, 10:38:37 AM
You do what it says, and enter the same password once more - and it should be OK from there on :)
Title: Re: Password security has recently been upgraded. Please enter your password again.
Post by: Ardii on May 11, 2011, 10:41:44 AM
I tried this and I try now again but it doesn't works .
Title: Re: Password security has recently been upgraded. Please enter your password again.
Post by: Aleksi "Lex" Kilpinen on May 11, 2011, 10:44:49 AM
Odd - It should work if the password is correct. Sadly I know nothing of this converter, so I'm probably not much help beyond my last reply.
Title: Re: Password security has recently been upgraded. Please enter your password again.
Post by: Oldiesmann on May 11, 2011, 03:16:51 PM
It should work fine if you enter the same password a second time. You're saying it just gives you the same page again if you re-enter your password?
Title: Re: Password security has recently been upgraded. Please enter your password again.
Post by: ThorstenE on May 11, 2011, 05:51:07 PM
there are at least two "known" bugs (one was tracked with id 4587, I would have reported the other one but my converter related bug reports have been ignored for a long time, thus I gave up on reporting more)

Bugs:
1) LogInOut.php
$other_passwords[] = md5(md5($_POST['passwrd']) . $user_settings['password_salt']);
there is a missing stripslashes(); for the password_salt.

2) the password salt in vBulletin is varchar32, therefore the salt column in SMF needs to be changed by the converter (see 4587)

Title: Re: Password security has recently been upgraded. Please enter your password again.
Post by: digitalmikey on July 21, 2011, 11:32:30 AM
Quote from: TE on May 11, 2011, 05:51:07 PM
there are at least two "known" bugs (one was tracked with id 4587, I would have reported the other one but my converter related bug reports have been ignored for a long time, thus I gave up on reporting more)

Bugs:
1) LogInOut.php
$other_passwords[] = md5(md5($_POST['passwrd']) . $user_settings['password_salt']);
there is a missing stripslashes(); for the password_salt.

2) the password salt in vBulletin is varchar32, therefore the salt column in SMF needs to be changed by the converter (see 4587)

I wonder if this will ever be addressed. I really need for my users NOT to have to change their password just because I switched to SMF.