12.04.2014, 11:18
Don't try to invent your own hash. This isn't even a hash in the sense of the word because it is reversible. If you need to reset passwords then let your users pre-hash them, then send them to you. Or even better: implement e-mail password reset.