note 55435 added to function.sha1

Actually, the post by Helpful Harry won't improve your security except for the most simple break in attempts. Since the random seed is attached to the end of the password hash, if you steal the hashed password, you steal the seed. That means you can write a simple php program to call the pw_check function Harry included from a loop, feeding it dictionary words or random characters. Of course, if you modified the program to use the seed in a more complicated way, "they" would have to know the new function's operation. But then again, if someone can steal your password database, they can probably steal your website code (or guess it). ---- Manual Page -- http://www.php.net/manual/en/function.sha1.php Edit -- http://master.php.net/manage/user-notes.php?action=edit+55435 Delete: added to the manual -- http://master.php.net/manage/user-notes.php?action=delete+55435&report=yes&reason=added+to+the+manual Delete: bad code -- http://master.php.net/manage/user-notes.php?action=delete+55435&report=yes&reason=bad+code Delete: spam -- http://master.php.net/manage/user-notes.php?action=delete+55435&report=yes&reason=spam Delete: useless -- http://master.php.net/manage/user-notes.php?action=delete+55435&report=yes&reason=useless Delete: non-english -- http://master.php.net/manage/user-notes.php?action=delete+55435&report=yes&reason=non-english Delete: other reasons -- http://master.php.net/manage/user-notes.php?action=delete+55435&report=yes Reject -- http://master.php.net/manage/user-notes.php?action=reject+55435&report=yes Search -- http://master.php.net/manage/user-notes.php