Login & Cookie Security

[eluser]Xeoncross[/eluser]
[quote author="georgerobbo" date="1256934665"]Of course you should have all passwords in your database encrypted.[/quote]

I think you mean hashed. Unless you MUST store the username/password (twitter login before OAuth) then you should only have salted and hashed passwords in your DB.