[eluser]WanWizard[/eluser]
It's been there for the last few years, when rainbow tables came in fashion.
Getting rid of it is quite difficult, because rehashing would require you to know the password. Can't break running sites, or reset all users passwords.
i'm thinking about doing this using sha1() after a succesful login (then I have access to the plain text password). I could use the length of the field to determine which method I need to be able to validate the password.
Another item on my very long todo list...
