[dhimes]

I....have no words. Effectively clear-text password storage. That should be criminal by now.

[yuhong]

I wonder about using HMAC with a secret key that can be changed for things like this.