Hide yo kids, hide yo wife. Seriously, I'd avoid going to the neoboards at all. If you have zero presence, the ebil hackers won't even know you exist. Making long posts about this there will just bring the spotlight on you.
Sure you can. The neologin cookie stores your username and password. I always check scripts for that before I install them, I've actually seen a kad feeding script that just grabbed that.
People need to stop making shit up.
// Set the login cookie.
self::set_login_cookie($NPUser->username, $key, $new_code, $expire);
public static function set_login_cookie($username, $key, $plaintext, $expire) {
if (is_frozen($username)) {
return false;
}
$cookie_value = "{$username}+" . self::cookie_hash_encrypt($key, $plaintext);
setcookie(self::LOGIN_COOKIE_NAME, $cookie_value, $expire, "/", ".neopets.com");
$_COOKIE[self::LOGIN_COOKIE_NAME] = $cookie_value;
}
//Basic function for hashing a cookie value. $key is their password, and
//$plaintext is the cookie_code value.
public static function cookie_hash_encrypt($key, $plaintext) {
$message = "npc_{$key}_{$plaintext}_biglongrandomstringhahalol thecakeisalielolololololol";
return sha1($message);
}
Goodluck trying to crack that. Few years old now. But I assume $message has been changed by now (so don't bother).
Yes your password is used, nothing worth spending the money to build a rig to crack it.
