You can also make the script chmod +x script.pl to ensure that users can't see how you crypt and decrypt. Another thing is to try putting the password file with the encrypted passwords into another directory that has different permissions.

--BigJoe