note 38809 added to function.md5

And i suppose it is possible to reverse md5 into other string that, after encoding it again will return same hashed string. it means that all pages that base their logging on sending already hashed passwords are not safe as it is possible to get another working password from it. And actually getting a password from phpBB is possible then - it will be other password but a working one. ---- Manual Page -- http://www.php.net/manual/en/function.md5.php Edit -- http://master.php.net/manage/user-notes.php?action=edit+38809 Delete -- http://master.php.net/manage/user-notes.php?action=delete+38809&report=yes Reject -- http://master.php.net/manage/user-notes.php?action=reject+38809&report=yes Search -- http://master.php.net/manage/user-notes.php