diff -urp user/user.module user_mod/user.module
--- user.module	2008-10-08 22:12:18.000000000 +0200
+++ user.module	2008-10-28 17:55:23.000000000 +0100
@@ -303,7 +303,7 @@ function user_save($account, $array = ar
       switch ($key) {
         case 'pass':
           $fields[] = $key;
-          $values[] = md5($value);
+          $values[] = md5($value.variable_get('salt', '')); // Salts the password.
           $s[] = "'%s'";
           break;
         case 'mode':       case 'sort':     case 'timezone':