Aren't all hashing algorithms vulnerable to the possibility for collisions (albeit with different degrees of difficulty)? It sounds like the problem here is more related to the logic that relies on a hash alone to make important decisions.
Not saying that MD5 is a good choice in this case, just that we may be blaming the wrong thing.
Not saying that MD5 is a good choice in this case, just that we may be blaming the wrong thing.