[Ikopar]

Yeah, that would be a little harder to crack, but someone could...yeah, exactly

[Roombor]

Would they really go to such lengths to hack some account to your site

[Ikopar]

No, probably not
Submitting the password when logging in is probably a more pressing matter, no?
So that should be the first security measure i should take

[Roombor]

Your host probably supports https

[Ikopar]

Is that the same as SSL? i think they wanted me to pay an extra 150 a year or something ridiculous like that

[Roombor]

Oh :)
It's http with ssl encryption
Maybe they ask that much because they have validated ssl certificates or something
Validated = signed

[Ikopar]

Bah, i figure i could probably do the same thing myself right? with some javascript perhaps
Encode the password client side

[Roombor]

That wont really help
They could still sniff the hash and send that directly to your server

[Ikopar]

Damn it
Wait, what if there's a random key stored in a javascript variable
That dictates how it's encoded
And...oh, but it'd have to send the key too

[Roombor]

Yeah :)