yikes, a php security site telling people to use sha1(). don't use sha1 hashes for storing passwords, use bcrypt. http://www.openwall.com/phpass/ http://www.o

yikes, a php security site telling people to use sha1(). don't use sha1 hashes for storing passwords, use bcrypt. http://www.openwall.com/phpass/ http://www.openwall.com/phpass/ or a quick code snippet: for ($salt = "", $x = 0; $x++ < 40; $salt .= chr(mt_rand(0,255))) ; $hashed = crypt($password, '$2a$08$' . hash("whirlpool", $salt));