While this module is derived from PHPLib's proven challenge-response authentication scheme, I cannot guarantee that I have not missed something crucially important. The module has not been reviewed by anyone aside from yours truely. I'm requesting that someone with some security wherewithal review the module.