[arb99]

a few lines down:

  system("openssl rand 448 > '".SALTFILE."'",$err);
                if ($err === 0) {
                    chmod(SALTFILE,0400);
                    $salt = file_get_contents(SALTFILE);
                }