Anyone using the PHP OpenID server code I wrote should update their changes to the latest version linked from http://www.livejournal.com/users/taral/147710.html and keep an eye there for future changes. ALL PREVIOUS VERSIONS ARE VULNERABLE due to a bug in the XTEA encryption routines. Sorry about this. :-/ -- Taral <taralx at gmail.com>