[vicmarconi]

Thanks for your reply.

But unfortunately I found something different at functions.php:

PHP Code:

$user['securitytoken_raw'] = sha1($user['userid'] . sha1($user['salt']) . sha1(COOKIE_SALT));
$user['securitytoken'] = TIMENOW . '-' . sha1(TIMENOW . $user['securitytoken_raw']);

$user['logouthash'] =& $user['securitytoken']; 


It seems strange, because $user['securitytoken'] (and therefore, $user['logouthash']) should have a -.
Perhaps I'm not understanding what is going on around the last line.

=& means that $user['logouthash'] is the same as $user['securitytoken'], and not a copy (so, no big deal). Am I right?