[jmull]

The password still has to get into the database... something passes it to an insert query or request. It just needs to hash the password on its way through. Let’s see:

* identify a hashing library * install/import it * call it (when storing the password and when comparing)

It’s a matter of minutes really.