MyBB Community Forums

Hello
today, when i checked my login to my forum + wireshark i see that when i login to forum password are clear,and not encrypted.
also acuentix said: User credentials are sent in clear text
is it normal?

It show the password as you typed in in? or was it hidden in those "dot"?

wireshark show the password as i typed in password box.

Unless your using SSL, all data will be sent unencrypted. It's how the internet was designed.

but i checked one vBulletin login (no ssl ) and i see that password are encrypted (i think with md5).
so all mybb passwords login are clear for wireshark?

vBulletin uses client side hashing, but it's not a complete solution. If you have Javascript disabled the password will be sent in plain text.

http://blog.nic0.me/post/641537317/clien...ore-log-in

nice info dear,so interesting.