[eluser]Yorick Peterse[/eluser]
Sha1() is "cracked", meaning that it will take ages before somebody figures out the password. By that time you've already figured out somebody's hacking your site and you'll ban him. Best practise is to use sha2 and a random salt,.
