3 ms·
To begin with, preventing SQL injection when passwords are stored in plain text without any escaping. (CHAR(8) field. No special characters allowed.)
by kijin 14y ago
To begin with, preventing SQL injection when passwords are stored in plain text without any escaping. (CHAR(8) field. No special characters allowed.)
- jiggy2011 14y agoThat's an utterly horrible reason but I take the point. I imagine many sites implementing these policies (some banks etc) are hashing their passwords properly and sanitizing SQL though!