2 ms·
Not sure about Diablo but one of the reasons I can think of why some web site's password is case in-sensitive (it is not uncommon) - they are checking the user
by tszming 14y ago
Not sure about Diablo but one of the reasons I can think of why some web site's password is case in-sensitive (it is not uncommon) - they are checking the user password directly with MySQL, e.g.
select * from users where user = 'john' and password = 'PASSWORD';
-- the password is actually case in-sensitive if your table collation is ci (which is the default)
Of course this also implies the site is storing the password as plain text..
- gizzlon 14y agois that true if "password" is char or varchar as well? Or only for text fields?
- tszming 14y agoFor nonbinary strings (CHAR, VARCHAR, TEXT), string searches use the collation of the comparison operands The default character set and collation are latin1 and latin1_swedish_ci, so nonbinary string comparisons are case insensitive by default. http://dev.mysql.com/doc/refman/5.1/en/case-sensitivity.html http://dev.mysql.com/doc/refman/5.1/en/case-sensitivity.html
- rmc 14y agoIn that case there is a much much much bigger problem than case sensitivity. Hint: storing passwords in plain text
- TazeTSchnitzel 14y agoThat or they just do `password.lower()`
- tptacek 14y agoThat's not what Battle.net does. They use SRP, which dictates a specific strong cryptographic storage.