Ah cheers fella.

Yeah that makes sense, so if their password was "smith"

1 . You'd MD5 "smith" a few times and store only that in the DB.

2. If they forgot their password you'd MD5 the stored one a bit more, trim it to say 8 chars then mail that back to them?

will do that!

Cheers!