// New user password fields (algo, and salt)

      $result = dbquery("ALTER TABLE ".DB_USERS." ADD user_algo VARCHAR( 10 ) NOT NULL DEFAULT 'md5' AFTER user_name ,

         ADD user_salt VARCHAR(40) NOT NULL AFTER user_algo");

      $result = dbquery("ALTER TABLE ".DB_USERS." ADD user_admin_algo VARCHAR( 10 ) NOT NULL DEFAULT 'md5' AFTER user_password ,

         ADD user_admin_salt VARCHAR(40) NOT NULL AFTER user_admin_algo");

      $result = dbquery("ALTER TABLE ".DB_USERS." CHANGE user_password user_password VARCHAR(64) NOT NULL");

      $result = dbquery("ALTER TABLE ".DB_USERS." CHANGE user_admin_password user_admin_password VARCHAR(64) NOT NULL");

      $result = dbquery("ALTER TABLE ".DB_NEW_USERS." CHANGE user_code user_code VARCHAR(40) NOT NULL");

   // Encrypts the password with given algorithm and salt

   private function _hashPassword($password, $algorithm, $salt) {

      if ($algorithm != "md5") {

         return hash_hmac($algorithm, $password, $salt);

      } else {

         return md5(md5($password));

      }

   }

return md5(md5($password))

return md5($password)

if ($passAuth->isValidCurrentPassword(true)) {

if ($passAuth->isValidCurrentPassword(false)) {