Client Edit: On After Update doesn't use auth->crypt_password
The client_edit.php file uses the crypt_password function of the auth-library in the onAfterInsert method, but not in the onAfterUpdate method.
This lines (405-411):
$salt="$1$";
$base64_alphabet='ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/';
for ($n=0;$n<8;$n++) {
$salt.=$base64_alphabet[mt_rand(0, 63)];
}
$salt.="$";
$password = crypt(stripslashes($password), $salt);
should be replaced with:
$password = $app->auth->crypt_password($password);