you missed where i was going with it, but that's ok.
i simply meant that a guy staring at your DB (2 posts ago) at a mysql prompt isn't going to be worried too much about how things are encoded. you're screwed at that point.
as to md5 vs md5 + salt, sure salt > no salt. i'm not defending the login procedure here, nor why we only use md5 in v7.x.
so if you want to think i'm coming down hard on you, then you might just be mis-reading my posts.
