[Forum] Same password stored in DB shown in different ciphertext?

[jobBole]

Same password stored in DB shown in different cipher text? It's so strange.

The same password should store as the same cipher text, how to make then same.

Please view the image below. All user are have the same password.

[Zachery]

vBulletin stores its passwords as md5(md5(password) . salt)

[jobBole]

vBulletin stores its passwords as md5(md5(password) . salt)

Yeah.
But why vB store the same password (plain text ) stored as different cipher text?

I want to the same password store as the same, no matter what kind of encryption method vB used.

[Zachery]

What? We do not store the password in plaintext, nor can I help you with that.

[jobBole]

What? We do not store the password in plaintext, nor can I help you with that.

Sorry, I dont mean stored in plain text, I mean that,
if two user have the same password, both their password stored in DB should the same.

Please see the image I posted, I set the user "test1" and "test2" have the same password, but their password stored differently in DB:"6748c3d89db4e0a2ed4415cd954f2606" and "b64edfc2807a3826aa7ac9b41ab45de1".

I want to find a solution to make them stored as the same in DB.

[Zachery]

No it shouldn't be. The salt changes the hashing. Sorry, i cannot provide any help with modifications to the software. Please seek help at vBulletin.org

[jobBole]

No it shouldn't be. The salt changes the hashing. Sorry, i cannot provide any help with modifications to the software. Please seek help at vBulletin.org

I must make them as the same.

Because the vb is only a small part of my system, some information of user, included username, password, will be moved from vB's DB to another bigger DB.

Thanks again.

[Lynne]

As Zachary has stated, vbulletin.org is the modification site and is the place you should seek help.

Many users/admins have had to bridge vbulletin with a user table from another application. There are hooks in the registration page where you can add in your own code to intercept the variables and add them into your separate user table and it doesn't mean you have to actually store the password as text. There are articles over on vb.org on bridging and even modifications to do so for different applications. Take a look at them.