locating your $dbpass

[Duke]

Anyone know where I can find this info so I can adjust my config.php files to point to it?

Thanks,

Ken

BTW, can it be found in phpMyadmin and, if so, where?

 

[Duke]

Well, don't everyone answer at once.

 

[matthewmurcia]

which password for which system are you talking about duke?

If you have access to the database you can find just about everything you need. Although I had this problem just yesterday with PHPAdsNew. The downside was it was stored in an MD5 hash so the only option was to run an UPDATE query with a known MD5 string.

 

[Duke]

The password that is created when installing phpnuke/mysql.

 

[matthewmurcia]

I'm not very familiar with phpnuke but they're almost always in a table called 'admin' or 'config' or even 'admin_config' or something like that followed by a really dificult row name like 'admin_pass' or masterdb_pass'

 

[stealthhosts]

I'm not very familiar with phpnuke but they're almost always in a table called 'admin' or 'config' or even 'admin_config' or something like that followed by a really dificult row name like 'admin_pass' or masterdb_pass'

Yep,
And all passwords should be stored in an MD5 hash for security.

Duke, I have some nuke installations on a box at home, I will take a look at it for you tonight if you like.

 

[matthewmurcia]

Try this Ken:

http://phpnuke.org/modules.php?name=PHP-Nuke_HOWTO&page=administrator-password-lost.html

 

[Duke]

Whoa, thanks matt, I'll have to give that a try.

I'm told that the $dbpass is encrypted somewhere in the database at time of install either manually or with a power tool such as fantastico. Where it's located is a complete mystery to me but I don't believe you'll find it anwhere in the nuke install especially if your trying to link a fresh install of nuke to an existing database.

 

[matthewmurcia]

You just have to find it in the right table of the database, duke. Once you find it and can access it with phpmyadmin (for example) then you can change it as much as you like, as long as you're sure of the MD5 hash. This would be an example update sql statment (for PHPAdsNew but the principal is the same) that would change the pass to the word 'secret' (you need to substitute the table name and the row name for the right ones for your nuke set up):

UPDATE phpads_config SET admin_pw = '5ebe2294ecd0e0f08eab7690d2a6ee69';

 

[Duke]

I considered that, hopefully it's not buried in some obscure file like nuke_users_temp or something like that. If so, I have roughly 91 tables with an untold amount of hiding places.

Thanks matt.

 

[matthewmurcia]

Duke, did you find it yet? You have me on tenterhooks wanting to know...

 

[Duke]

Oh it's fantastic, my webhost gave up trying to help me and told me essentially to take my troubles elsewhere. I abandoned the project for now and will be asking it of the new hosts I'll be courting. I do wonder if it's not encrypted somewhere and unaccessable for security reasons.

Even if this is the case, you should be able to assign a new user or additional users full access to your db with a new password but that hasn't worked either I'm afraid.

I'll let you know if I get somewhere on this as I'm dying to find out if it can be done (I think it can).