WTAF?

you can add extra characters to your password and it's still accepted?

a) no, that's not how passwords are supposed to work
b) no, you're storing the passwords
(not just wrong, but you're storing them in the first place)
c) you're not hashing them?
d) YOU ARE A F**KING BANK!

#CoSoSec