[nautiboy]

I know this question was asked earlier, but it was never answered.

Is there any way to handle the case where the password you have is an md5 hash? I don't like sending passwords in the clear, so my login pages do the md5 hash before sending up to the server, so I don't have access to the actual password.

Any ideas?

--------------- Added [DATE]1213414760[/DATE] at [TIME]1213414760[/TIME] ---------------

OK, I've managed to answer my own question. It turns out that you can use md5's also. If you pass in a plain-text, it will md5 it. But if you pass in an md5, it will use it as-is (basically it just checks to see if the password is 32 characters long - if it is, it assumes it's an md5).

So it "just works". Cool! :up: