Notoriously, the site developer wrote his own crypto code... in PHP... which you should never do, regardless, but especially in PHP (I recall some numerical limitation having to do with bit rotation and automatically-signed numbers at the time)
It's too bad my original comment got slammed because PHP deserves the slamming IMHO