[kh99]

Originally Posted by squishi

Why don't they match?

The password value in the cookie has been put through md5() once more, after being concatenated with the value of COOKIE_SALT (defined in includes/functions.php). So you'd want to do something like:

PHP Code:

if (md5($password_from_db . COOKIE_SALT) == $password_from_cookie)
{
   // password match
} 


see function verify_authentication() includes/funtions_login.php.