what is the industry standard when it comes to storing passwords?

[eluser]dik_[/eluser]
Not sure about industry standards, but I think that md5-ing the password string, with a pinch of salt, should be OK.

For example, I know for a fact that IPB uses the following formula:

Code:

md5( md5($pass_salt) . md5($password) )

Hope that helps...