- Код: Выделить всё
##############################################################
## MOD Title: md5*3()
## MOD Author: R@ < meos@mail.ru > (Kirill) n/a
## MOD Description: Gives more security to your users passwords by hashing it 3 times by md5 algorythm instead of one
## MOD Version: 1.0.0
##
## Installation Level: Easy
## Installation Time: 7 Minutes
## Files To Edit (4): login.php
## includes/usercp_register.php
## includes/usercp_sendpasswd.php
## admin/admin_users.php
## Included Files (1): db_update.php
##############################################################
## For Security Purposes, Please Check: http://www.phpbbguru.net/mods/ for the
## latest version of this MOD. Downloading this MOD from other sites could cause malicious code
## to enter into your phpBB Forum.
##############################################################
## Author Notes: run db_update.php for updating exists passwords
##
## Before adding this MOD to your forum, you should backup users table of your phpBB database
##
##
##############################################################
## MOD History:
##
## 2004-08-11 - Version 1.0.0
## - Initial Release
##
##############################################################
## Before Adding This MOD To Your Forum, You Should Back Up All Files Related To This MOD
##############################################################
#
#-----[ OPEN ]------------------------------------------
#
login.php
#
#-----[ FIND ]------------------------------------------
#
if( md5($password) == $row['user_password'] && $row['user_active'] )
#
#-----[ REPLACE WITH ]------------------------------------------
#
if( md5(md5(md5($password))) == $row['user_password'] && $row['user_active'] )
#
#-----[ OPEN ]------------------------------------------
#
includes/usercp_register.php
#
#-----[ FIND ]------------------------------------------
#
if ( $row['user_password'] != md5($cur_password) )
#
#-----[ REPLACE WITH ]------------------------------------------
#
if ( $row['user_password'] != md5(md5(md5($cur_password))) )
#
#-----[ FIND ]------------------------------------------
#
$new_password = md5($new_password);
#
#-----[ REPLACE WITH ]------------------------------------------
#
$new_password = md5(md5(md5($new_password)));
#
#-----[ FIND ]------------------------------------------
#
if ( $row['user_password'] != md5($cur_password) )
#
#-----[ REPLACE WITH ]------------------------------------------
#
if ( $row['user_password'] != md5(md5(md5($cur_password))) )
#
#-----[ OPEN ]------------------------------------------
#
includes/usercp_sendpasswd.php
#
#-----[ FIND ]------------------------------------------
#
SET user_newpasswd = '" . md5($user_password) . "', user_actkey = '$user_actkey'
#
#-----[ REPLACE WITH ]------------------------------------------
#
SET user_newpasswd = '" . md5(md5(md5($user_password))) . "', user_actkey = '$user_actkey'
#
#-----[ OPEN ]------------------------------------------
#
admin/admin_users.php
#
#-----[ FIND ]------------------------------------------
#
$password = md5($password);
#
#-----[ REPLACE WITH ]------------------------------------------
#
$password = md5(md5(md5($password)));
#
#-----[ SAVE/CLOSE ALL FILES ]------------------------------------------
#
# EoM
db_update.php
- Код: Выделить всё
<?php
define('IN_PHPBB', true);
$phpbb_root_path = './';
include($phpbb_root_path . 'extension.inc');
include($phpbb_root_path . 'common.'.$phpEx);
$sql = "UPDATE " . USERS_TABLE . " SET user_password = md5(md5(user_password)) WHERE user_id > '1'";
if (!$result = $db->sql_query($sql))
{
die('Error');
}
else
{
die('OK, delete this script');
}
?>
