note 83072 added to function.sha1

I think ranko's method is tougher to crack if there is a directory attack. However there is one small change I would suggest. Instead of having the hsalt as a limited array, it is better to generate a random string and use that as the salt. In this case you will need the salt to reside in the database along with the username and password. Thanks Ranko... ---- Server IP: 208.69.120.35 Probable Submitter: 159.127.66.112 ---- Manual Page -- http://www.php.net/manual/en/function.sha1.php Edit -- https://master.php.net/note/edit/83072 Del: integrated -- https://master.php.net/note/delete/83072/integrated Del: useless -- https://master.php.net/note/delete/83072/useless Del: bad code -- https://master.php.net/note/delete/83072/bad+code Del: spam -- https://master.php.net/note/delete/83072/spam Del: non-english -- https://master.php.net/note/delete/83072/non-english Del: in docs -- https://master.php.net/note/delete/83072/in+docs Del: other reasons-- https://master.php.net/note/delete/83072 Reject -- https://master.php.net/note/reject/83072 Search -- https://master.php.net/manage/user-notes.php