I've been working on a security system and reading all about salting and hashing passwords. In one of the articles I read, it mentioned something about phpBB storing passwords in plain text in the database. I'm wondering, does SMF do that too? If not, do you know what SMF does with the password? Does it salt it and hash it and store it? Does it just hash it? Does it encrypt it with a private key?
The worry, of course, is if a forum user uses the same password for the forums and for something important, like banking information. I don't, so I'm not worried about me, but who knows what the other users do.