Check your html form code for a typo : The md5 hash of "userpass" is 63e780c3f321d13109c71bf81805476e (I just tried it out on a whim at miraclesalad.com.) That's why you are getting the same hash every time - your variable always has the value "userpass" instead of the value that is typed into the text input on your form. Greg