Exetools  

Go Back   Exetools > General > General Discussion

Notices

Reply
 
Thread Tools Display Modes
  #1  
Old 01-27-2005, 03:44
Snatch
 
Posts: n/a
Intesting FTP server idea

Why not link the user accounts on the forum to the FTP server. This will take care of leaks and having to change the login info all of the time. It will also make people more accountable as people who try to leach the whole server could be banned temporarily etc. Things dont seem to be too problematic this days but still I dont see why nobody has written some sort of web interface to make the ftp user database cross reference with the forum. Maybe thats too much work to be worth it though.

Snatch
Reply With Quote
  #2  
Old 01-27-2005, 04:45
JMI JMI is offline
Leader
 
Join Date: Jan 2002
Posts: 1,627
Rept. Given: 5
Rept. Rcvd 199 Times in 99 Posts
Thanks Given: 0
Thanks Rcvd at 98 Times in 96 Posts
JMI Reputation: 100-199 JMI Reputation: 100-199
Hm. Well Duh!

Perhaps you haven't noticed that the FTP "username" IS directly linked to the useraccounts on the Forum. Aaron can now track which forum user's account is accessing the FTP and determine whether that "useraccount" appears to be being abused.

Regards,
__________________
JMI
Reply With Quote
  #3  
Old 01-27-2005, 04:52
goggles99 goggles99 is offline
Friend
 
Join Date: Aug 2004
Posts: 62
Rept. Given: 5
Rept. Rcvd 0 Times in 0 Posts
Thanks Given: 1
Thanks Rcvd at 4 Times in 4 Posts
goggles99 Reputation: 0
Arrow

interesting idea... however it may be a little more difficult than you think.

(correct me if I am wrong)
vBulletin only stores salted md5 hashes of passwords, not the actual passwords themselves. So your ftp server must be able to hash and salt your password before comparison.

Quote:
Originally Posted by vBulletin
the purpose of the salting of md5 hashes is to make sure the password is unique per forum. Say that a forum backup got obtained by someone who shouldn't they could brute force the hash password if its not salted or edit their cookie and put in the hash to login.
This makes things a little more complicated...
It is still possible however. Any vBulletin script coders here? (I'm sure there is)
Reply With Quote
Reply


Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Just an idea |roe General Discussion 0 04-19-2012 14:38
Any idea? annibal General Discussion 2 09-01-2003 03:09


All times are GMT +8. The time now is 00:52.


Always Your Best Friend: Aaron, JMI, ahmadmansoor, ZeNiX, chessgod101
( Since 1998 )