Ravens PHP Scripts: Forums
 

 

View next topic
View previous topic
Post new topic   Reply to topic    Ravens PHP Scripts And Web Hosting Forum Index -> Security - PHP Nuke
Author Message
Doulos
Life Cycles Becoming CPU Cycles


Joined: Jun 06, 2005
Posts: 625

PostPosted: Sun Dec 21, 2008 5:42 am Reply with quote

What standard is used to generate passwords? I thought it was md5, but when I 'google' for md5 password generator, and use any one of the sites listed, the passwords do not work. But if I generate a password through RN admin auth by adding an admin of testing, that password does not match the others I generated using the aforementioned pw scipts.

For example:

Using this site Only registered users can see links on this board! Get registered or login!:a password of testing comes out as ae2b1fca515949e5d54fb22b8ed95575.

Adding an admin through the RN admin cp and changing the password to testing, then building the staccess file generates this: $1$RhwxlwfR$r0wRKE86txtjUyUbJgpBf.

When I try to log in as an admin using the first this in staccess testing:ae2b1fca515949e5d54fb22b8ed95575, it fails, but the second one (testing:$1$RhwxlwfR$r0wRKE86txtjUyUbJgpBf.) works.

I have not been able to find a stand alone script that will generate encrypted passwords that work in staccess or htpasswd.

Suggestions on where to look?
 
View user's profile Send private message
jakec
Site Admin


Joined: Feb 06, 2006
Posts: 3048
Location: United Kingdom

PostPosted: Sun Dec 21, 2008 6:20 am Reply with quote

Can I ask why you want to do this?
 
View user's profile Send private message
Guardian2003
Site Admin


Joined: Aug 28, 2003
Posts: 6792
Location: Ha Noi, Viet Nam

PostPosted: Sun Dec 21, 2008 7:06 am Reply with quote

I believe the staccess password also uses a salt, timestamp or both in building a variable before to whole thing is md5'd.
Need proof? Put your password into the user password field in nuke_users using phpMyAdmin and and then select md5 on the field - I bet it doeasn't match the string using in staccess for the same plain text password Wink
 
View user's profile Send private message Send e-mail
Doulos
PostPosted: Sun Dec 21, 2008 2:39 pm Reply with quote

jakec, I wanted to create an htaccess and staccess file to protect a particular folder on a non-phpnuke website.
 
jakec
PostPosted: Sun Dec 21, 2008 2:42 pm Reply with quote

If you are using cPanel then you can do it through that.
 
Doulos
PostPosted: Sun Dec 21, 2008 2:49 pm Reply with quote

That website is on a dedicated linux server which does not use cpanel or any other cp.

I do have cpanel on another server, so I guess I could set up a dummy site and use cpanel to create passwords for the one that doesn't have cpanel.

I was hoping there was an easier way to do it.
 
jakec
PostPosted: Sun Dec 21, 2008 3:23 pm Reply with quote

Have a look at this post: Only registered users can see links on this board! Get registered or login!
 
Doulos
PostPosted: Sun Dec 21, 2008 10:00 pm Reply with quote

I guess I am too ignorant to get that script to work. I can just do it the long way. I know how to do that and it works for me. Thanks for your help, though.
 
evaders99
Former Moderator in Good Standing


Joined: Apr 30, 2004
Posts: 3221

PostPosted: Mon Dec 22, 2008 12:52 am Reply with quote

It depends on how Apache is set up Only registered users can see links on this board! Get registered or login!

_________________
- Only registered users can see links on this board! Get registered or login! -

Need help? Only registered users can see links on this board! Get registered or login! 
View user's profile Send private message Visit poster's website
Susann
Moderator


Joined: Dec 19, 2004
Posts: 3191
Location: Germany:Moderator German NukeSentinel Support

PostPosted: Mon Dec 22, 2008 5:39 am Reply with quote

Quote:
I guess I am too ignorant to get that script to work. I can just do it the long way. I know how to do that and it works for me.

Doulos
If you are still interested mine works well I believe and I can send you the link to my testsite via PM.
 
View user's profile Send private message
Doulos
PostPosted: Mon Dec 22, 2008 12:35 pm Reply with quote

Thanks, Susann. I would appreciate any help.
 
Susann
PostPosted: Mon Dec 22, 2008 1:17 pm Reply with quote

Merry christmas !

RavensScripts
 
Display posts from previous:       
Post new topic   Reply to topic    Ravens PHP Scripts And Web Hosting Forum Index -> Security - PHP Nuke

View next topic
View previous topic
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You can attach files in this forum
You can download files in this forum


Powered by phpBB © 2001-2007 phpBB Group
All times are GMT - 6 Hours
 
Forums ©