note 109080 deleted from function.crypt by joey

Note Submitter: iane at sussex dot ac dot uk ---- Don't use MD5 crypt. Use something much slower, like the blowfish algorithm. Use a unique salt for each user, otherwise everyone with the same password will have the same crypt password. Common crypt passwords in a user base will obviously have been generated from common passwords. Therefore, a hacker with your password db will know which passwords to target with brute force attacks. Using the username and your domain in a salt would seem like the obvious way to get unique salts.