yah, i used to do something like the parent poster until i realized that it's a serious reduction in the brute-force search space for a malicious attacker.