How to encrypt the user database (MySQL)

[Wukkuan]

Is it possible to use the encrytped passwords from another DB to authenticate a TS user (or admin)? Or, if it is not, is the source for TS available?


EDITED by Guldi: made thread sticky and changed title (old one: "TeamSpeak and UBBThreads")

[madcat]

the passwords in TS are still un encrypted
so if you know how the passwords are encrypted you can match those two.

so:
read password from teamspeak db
encrypt password
match password with other database

[Wukkuan]

Yeah, but I was hoping I could use the forums password directly without writing a script to sync the 2. I would also prefer to keep the forum passwords encrypted completely (i.e. not have it unencrypted in another DB)

[madcat]

yes you could make a link so people could login, but isn't that security at it worst?

anyways, search in the forum for teamspeak:// and you will find it i guess.

[McAfee]

maybe this coud help:
How to hash passwords when using MySQL

If you are using MySQL as your database,
you could hash your passwords to either MD5 or SHA.
This way they won't store as plain text.
If you want to use SHA, then specify SHA instead of MD5.

Just edit the files new_client.sql , read_client_login.sql and edit_client.sql using notepad.
I suggest you backup them first, and backup your database too.
Replace :sPassword with MD5(:sPassword)

To convert my current database, I used the following SQL command:

UPDATE ts2_clients SET s_client_password=MD5(s_client_password);

You could probably even use a more secure hash/encryption algorithm:
Read more on MySQL's Encryption Functions

[madcat]

Originally posted by McAfee
maybe this coud help:
How to hash passwords when using MySQL

If you are using MySQL as your database,
you could hash your passwords to either MD5 or SHA.
This way they won't store as plain text.
If you want to use SHA, then specify SHA instead of MD5.

Just edit the files new_client.sql , read_client_login.sql and edit_client.sql using notepad.
I suggest you backup them first, and backup your database too.
Replace :sPassword with MD5(:sPassword)

To convert my current database, I used the following SQL command:

UPDATE ts2_clients SET s_client_password=MD5(s_client_password);

You could probably even use a more secure hash/encryption algorithm:
Read more on MySQL's Encryption Functions

yeah great i can verify it works for me.
but remember this does not make the server more secure, because passwords are still transfered unencrypted.

i'll write a small script so other people can upgrade easyer

[madcat]

okey this way everybody should be able to update to an encrypted database. i have edited the sql files and made a small script for both windows and linux users.

http://madcat.student.utwente.nl/teamspeak_md5.exe [down]
http://madcat.student.utwente.nl/teamspeak_md5.tar.gz [down]
http://madcat.student.utwente.nl/teamspeak_md5.zip [down]

[ScP]

Nice work!

[louig1]

does this work on the sql lite?

[ScP]

I dont think SQLite supports MD5 checksums.

[madcat]

does this work on the sql lite?

here are the supported commands:
http://www.sqlite.org/lang.html

there is no md5, but you can try it.
but i do not give you a very high success rate.

[louig1]

ok how can i convert my ts database over to mysql so i can use the md5 and such?

[madcat]

ok how can i convert my ts database over to mysql so i can use the md5 and such?

if you used the search you could have found this:
http://forum.goteamspeak.com/showthread.php?t=12184

[adb22791]

maybe this coud help:
How to hash passwords when using MySQL

If you are using MySQL as your database,
you could hash your passwords to either MD5 or SHA.
This way they won't store as plain text.
If you want to use SHA, then specify SHA instead of MD5.

Just edit the files new_client.sql , read_client_login.sql and edit_client.sql using notepad.
I suggest you backup them first, and backup your database too.
Replace :sPassword with MD5(:sPassword)

To convert my current database, I used the following SQL command:

UPDATE ts2_clients SET s_client_password=MD5(s_client_password);

You could probably even use a more secure hash/encryption algorithm:
Read more on MySQL's Encryption Functions

Works great! If you have phpmyadmin, its even easier. Thanks!