1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

Fixed Password authentication problem from Imported IPB 3 forums

Discussion in 'Resolved Bug Reports' started by TJ Adams, May 12, 2016.

  1. TJ Adams

    TJ Adams Member

    I did a conversion from IPB 3.4 to XenForo and found that a percentage of members were unable to authenticate on their first login attempt. But, many users could authenticate fine.

    Took a while to figure out, but, the information on how passwords are treated in IPB is explained here:


    In the middle of that page is this:

    IPB actually runs the plain text password through that cleaning routine before doing the hash operation. I confirmed it by manually generating the hashes with and without cleaning the password first.

    The XenForo module that authenticates IPB login credentials does not take this into account. It just does the basic: return md5(md5($salt) . md5($password)); operation.

    I made an edit in: ./library/XenForo/Authentication/IPBoard.php - adding a function to do the same character substitutions prior to testing the hash, and that addressed the problem.

    When researching this, I was surprised it wasn't found before this. There are a couple threads here about passwords not always working on some IPB imports, but, nothing about this.
    Last edited: May 12, 2016
  2. Mike

    Mike XenForo Developer Staff Member

    I've added these conversions as an additional check, since this is the first I've heard about this and I don't want to accidentally break auth (particularly if this didn't apply to older versions).

Share This Page