WTAF?
you can add extra characters to your password and it's still accepted?
a) no, that's not how passwords are supposed to work
b) no, you're storing the passwords
(not just wrong, but you're storing them in the first place)
c) you're not hashing them?
d) YOU ARE A F**KING BANK!
@0x56 😣
Recently heard about a certain bank sending their clients an email newsletter with a link to log into their online banking embedded in it. 🙄 wtaf