Out of curiosity, why did your friend write his own code instead of using some freely available spambot proof forum code? Basic rule of thumb is that if you think you're clever and will come up with your own verification / encryption algorithm ... you're not. Tried and true really does tend to be the best option.
That being said: if the algorithm is at all good, publishing it won't diminish the security of the application.
__________________
Eat antimatter, Posleen-boy!
|