[Link14716]

Today at 10:19 AM N9ne said this in Post #5
I believe there's even more to it than that, I think they mix in the userid too?

Actually, I was slightly wrong.

PHP Code:

if ($bbuserinfo['password'] != md5(md5($password) . $bbuserinfo['salt']) AND $bbuserinfo['password'] != md5($md5password . $bbuserinfo['salt'])) 


Close enough, but the salt is only md5's once while the password is md5'd by itself and then again with the salt.