note 24656 added to function.md5

don't matter what you do, someone has to type their normal password in anyway, & passwords usually means a database exists... Plonk your temp md5 on the database, cookies & sessions in place of the password... you can also md5 an md5. But what's going to stop anyone from opening your database with a simple line for example.... <!-- mysql_connect(username) SELECT everything especially passwords LIMIT none --> I bet it's on every one of your pages... including your database password if it needs one -- & I bet it don't. Of course.... I'm all ears... Brian -- http://www.php.net/manual/en/function.md5.php http://master.php.net/manage/user-notes.php?action=edit+24656 http://master.php.net/manage/user-notes.php?action=delete+24656 http://master.php.net/manage/user-notes.php?action=reject+24656