Right you are, thanks. I'll fix that. I'll probably leave the email code as-is and add a random salt for each account, run crypt and just save the salt and hash for each user.