10-04-2012, 01:07 PM
Quote:So this is what happens:
md5(md5($salt).$password)
The comment above says $password is the md5'ed password, not the plaintext-password. This makes much more sense, since it means its still 2811 and nothing changed silently.