note 101319 deleted from function.crypt by danbrown

Note Submitter: sforsman ---- @fmaz008: It's not a problem with the actual function. If you are not supplying a salt (the second parameter), the function will use Standard DES. There lies the actual problem. What you are proving, is actually mentioned in the beginning of the description of this function. If you want to hash passwords properly with this function, supply a salt like '$2a$08$<insert 22 random characters here>$'. This will make the function use Blowfish-based bcrypt, which is very strong for password hashing. Just make sure you have PHP 5.3.