WTAF?
you can add extra characters to your password and it's still accepted?
a) no, that's not how passwords are supposed to work
b) no, you're storing the passwords
(not just wrong, but you're storing them in the first place)
c) you're not hashing them?
d) YOU ARE A F**KING BANK!
@tmbrown327 - Hong Kong and Shanghai Banking Corp.
@0x56 Yeah, I always just shorten that to the bank of China, and that limits my exposure to them pretty drastically.