note 112102 rejected from faq.passwords by googleguy

Note Submitter: denzil dot newman at southessex dot ac dot uk ---- Why not salt an md5 or sha with a username or user id? Or rather at least include the username in the salt, it would mean no two users would have the same password hash and also the reverse dictionary lookups would be fruitless. E.g. $pwHash = md5($strPass.$saltConstant.$username) wouldnt that add the security required for most systems?