I need a bug in a custom php app fixed. Currently passwords can be extracted using javascript. 2 things need to be done. First, the passwords need to be changed so they are stored as a hash and secondly, the JavaScript bug needs to be fixed. Work needs to be done asap.