The password is being sent to the general::login function as md5 and then sent to escapeSimple() as md5. It only needs to be md5-ed once. I think it is appropriate to remove the md5 sent to general::login.
Log in to post a comment.