I don't really see a point in a new hash algorithm, md5/sha1 work just fine - throw in an SSL on the line and you're quids in.

I would although like to see the whitespace error resolved when you include Javascript in a page with the header() function.