note 27692 added to function.crypt

How about using the first two characters of the USERNAME as a salt? This will prevent the problem with equal first eight characters in passwords in most cases, and will also not leave the first two characters of the plain-text password open in .htaccess files. -- http://www.php.net/manual/en/function.crypt.php http://master.php.net/manage/user-notes.php?action=edit+27692 http://master.php.net/manage/user-notes.php?action=delete+27692 http://master.php.net/manage/user-notes.php?action=reject+27692