What is the "salt" field in the "user" table?

[WavMixer]

I'm in the process of importing an access db to populate the "user" table. Most of the fields are self explanatory, however the "salt" field has me stumped. There are a series of 3 characters in each row (see example below) that don't make any sense to me

salt
(BS
fXp
:k4
]6l
LAx
H2y
I)e
Jg1
2lg
WE0
@P!

[Ace]

It has to do with encrypting that user's password.

[WavMixer]

I have located the "password" field and it's encrypted entries. I am planning on using the same generic encrypted password for every user and have the user change it to a password of their choice on the first login. Does the salt field correlate with the password field? If yes, then if I paste the same encrypted password into the password field for every user, Could I just copy encrypted contents of the salt field to every member?

[Steve Machol]

You need to post over at vbulletin.org for help with custom code.

[WavMixer]

I'm not sure how asking about the purpose of standard fields is related to custom code? Is the salt field not a standard field of the user table?

[Andy]

I think this thread will help you.

http://www.vbulletin.com/forum/showthread.php?t=308533

[WavMixer]

Thank you everyone for your responses. I think I know what needs to be done now.

[knightdreams]

You need to post over at vbulletin.org for help with custom code.

He was asking about a default vb_ database field, so it is a question valid here on vbulletin.com and nothing to do with vbulletin.org

[WavMixer]

He was asking about a default vb_ database field, so it is a question valid here on vbulletin.com and nothing to do with vbulletin.org

Thank you. That is what I thought too. Now assuming that we are talking about the default database tables and fields, I still have a question that I would appreciate some help with. If I fill the same encrypted password "17efa62687f5b204fa880313011f0702" in the default password field for every username and enter the correlating "]6l" into every salt field, can I assume that there will be no password errors when logging in? Mind you that I'm not asking about a custom script, I don't need any help on how to import the data, I just need to know how a standard off the shelf version of vBulletin handles the information for the login process.

[Zachery]

You shouldn't use the same salt for every user, and inserting users manually into the database can cause lots of problems. Honestly it is in your best intrests to get help with this at vBulletin.org

[WavMixer]

You shouldn't use the same salt for every user, and inserting users manually into the database can cause lots of problems. Honestly it is in your best intrests to get help with this at vBulletin.org

If I were to use the same salt for every user, would not the salt change once the user has changed their password? I do understand that I will need to populate user, userfield, usertextfield all with correlating userid when manually inserting user data. Please excuse my persistence, I'm just trying to understand the functionality of this program so that I don't have to be dependent upon others. Feed a man a fish... Teach a man to fish....

[Zachery]

No, the salt never changes.

[WavMixer]

I have successfully imported an Access file as a CSV file, manipulated the fields to match the user, userfield and usertextfield tables, then save the CSV as a SQL file and presto! I have managed to import all of the user info using the same salt entry and password for every user. The users were able to log into their account and change their password. If any of you need help understanding how to do this, I'll be happy to explain this seemingly difficult feet.

I have taught myself how to fish!!!!

[knightdreams]

"Give a man a fish and feed him for a day, Teach a man how to fish and feed him for life."

Good job on figuring it out WavMixwe

[paulnicholson]

I have successfully imported an Access file as a CSV file, manipulated the fields to match the user, userfield and usertextfield tables, then save the CSV as a SQL file and presto! I have managed to import all of the user info using the same salt entry and password for every user. The users were able to log into their account and change their password. If any of you need help understanding how to do this, I'll be happy to explain this seemingly difficult feat.

I have taught myself how to fish!!!!

Yes please. I'm trying to do a similar thing here: https://stackoverflow.com/questions/...m-with-hundred