[DHDesign]

if we have an SSL on the site, could i make things simpler and just remove the javascript client-side md5 encryption that vbulletin uses?

that way, the password would be sent as clear text, hashed and matched to the encryption on the database...then there would be no need for the cache settings and so on.

reason i ask is also that i created a test script to see what the output of the md5 client side encryption is and it doesnt match what is on the database side for the same password...im guessing since the client side encrypts with the license of the board whereas the database side is with the salt found in the user table....correct? or am i missing something?

ps - thanks for the responses, much appreciated!