Wondering how to see users passwords

Started by Joos, January 03, 2012, 04:58:07 PM

Previous topic - Next topic

Joos

How can i see other users there passwords if i am the owner of the site?

and how i decrypt the encryption?

Suki

Disclaimer: unless otherwise stated, all my posts are personal and does not represent any views or opinions held by Simple Machines.

Joos


Suki

I don't know and even if I do, I wouldn't tell you.
Disclaimer: unless otherwise stated, all my posts are personal and does not represent any views or opinions held by Simple Machines.

Illori

given that the passwords have a salt added, it is not possible without reversing the salt and the password hash which would not work anyway.

Joos

Quote from: Illori on January 03, 2012, 05:04:57 PM
given that the passwords have a salt added, it is not possible without reversing the salt and the password hash which would not work anyway.
Why cant we see users there password if its you're site then?

I have a runescape private server with a database and i can see users who log in there passwords why has this been disabled?

Illori

it is a privacy issue, we dont explain how and dont allow such on this forum if it were possible.

Joos

Quote from: Illori on January 03, 2012, 05:09:28 PM
it is a privacy issue, we dont explain how and dont allow such on this forum if it were possible.
Is it a security reason?

Illori


Ozzie

Quote from: Illori on January 03, 2012, 05:12:23 PM
no it is privacy as i stated.

i totally agree with allori it is a privacy issue,why would you need or want to see user passwords unless it was for malicious use,and anyhow how secure would your members feel if they knew you had access to there passwords the whole point of secret passwords is "just that"  they are secret

2000+ games available to download

Thantos

Quote from: Joos on January 03, 2012, 05:02:44 PM
Quote from: Suki on January 03, 2012, 05:01:37 PM
Not possible, sorry.
Is there no way to decrpyt it?
Passwords are passed through a one way hash.  The forum doesn't store the passwords in a reversible format.  The best you can do is to find another string that hashes to the same value.  This is not a simple task and with the use of a random salt significantly increases the complexity.

Administrators never need to know a user's password.  If I need to log into a user's account then I can change the password with an admin account and then log in.

ARG01

As an admin you can change any users password so why would you want to see a users password in the first place? 
There is simply no logic at all in your question.  ???
No, I will not offer free downloads to Premium DzinerStuido themes. Please stop asking.

Advertisement: