snoozbuster

Okay, so after more research I’ve found more information. WP passwords are stored like “$P$” + (letter representing hash repetition count) + (8-character salt) + (hash), and PasswordHash::CheckPassword() should extract these things and correctly hash your password. But the password hash I get from “SELECT user_pass FROM wp_users WHERE user_login = %d” doesn’t match the one from CheckPassword(). I even reconstructed the function for testing, to see where it was going wrong, and it appeared to be working fine, it just doesn’t match. I then constructed a function to iterate hashing until it found a matching one to see if the count was off, but even that failed (I went up to 100,000 iterations).

So, any ideas?

And before you say I didn’t use a semicolon, I tried it with and without.

This is the only query that looks relevant…

[12] => Array
        (
            [0] => SELECT * FROM wp_users WHERE user_login = 'admin'
            [1] => 0.000102996826172
            [2] => require, require_once, require_once, require_once, WP->init, wp_get_current_user, get_currentuserinfo, wp_validate_auth_cookie, get_user_by, WP_User->get_data_by
        )

I’m trying to install phpMyAdmin right now, but I don’t know how well it’s going to work (or even what I’m looking for).

I am 100% sure the user exists. I just checked, and there is a user named “test” (what I’ve been using) with the username “test” and the nickname “test” on my users panel in the backend. I’ve tried it with a couple admin accounts, too, and the same thing happens. I have to wonder if, for some reason, the database is empty because I’m running the file outside WordPress…? At this point, it has to be something like the database is empty for whatever reason.

Yeah, .NET. I was using one method, and then I found a quicker way, but neither work. I’ll post both. I just tried passing ‘test’ directly, but it did the same thing. I’m really at a loss here.

Here’s the C# code, but I don’t know if it’ll help. I found a test .NET POST and GETter, but it did the same thing. http://pastebin.com/SprV69UP

Hmm… I added the line echo $u . " " . $p . " " right after $p = $_POST['p'], and it’s echoing back the correct username and password. I could show you my C# code if you like, dunno if you know C# or not but maybe you’ll see something. The data I’m POSTing looks like "u=username&p=password".