Comment by voidfunc

Doesn't this assume the passwords aren't hashed and salted?