Cleartext passwords in the database? Come on guys, it's a no-brainer to call even crypt() or any other one-way-hash function so that a server admin doesn't have access to every password on the system.

Teeleton