> sites that disallow special characters This is often an external code smell of not hashing the passwords but instead storing them as plaintext in a CHAR(8) f

> sites that disallow special characters This is often an external code smell of not hashing the passwords but instead storing them as plaintext in a CHAR(8) field in a SQL database somewhere.