MD5 and SHA1 (which SMF uses, making it slightly more secure than phpbb btw :razz
are both secure enough for your average forum, especially since as you correctly stated, people shouldn't use the same password for different sites. But even more secure algorithms, like the SHA2-family, can be implemented in JS and there are open source implementations available. In other words, if you'd want to go for "beyond reasonable" security, use SHA256 and encrypt client-side.
Might actually be a good idea for a phpbb mod
are both secure enough for your average forum, especially since as you correctly stated, people shouldn't use the same password for different sites. But even more secure algorithms, like the SHA2-family, can be implemented in JS and there are open source implementations available. In other words, if you'd want to go for "beyond reasonable" security, use SHA256 and encrypt client-side.Might actually be a good idea for a phpbb mod

