3 ms·
>Therefore, if your password policy as any more restrictive than [\x20-\xFE]{8,64}, I'm going to assume that you store my passwords in a plain-text VARCHAR fiel
by blablabla123 14y ago
>Therefore, if your password policy as any more restrictive than [\x20-\xFE]{8,64}, I'm going to assume that you store my passwords in a plain-text VARCHAR field without proper escaping.
Alternative interpretation: the Website is neither UTF8-safe (or whatever charset you prefer) nor are prepared statements used. Otherwise VARCHAR is fine even without any escaping.
- kijin 14y agoSorry, that was supposed to be \x7E but I can't edit anymore. Now you only need to deal with printable ASCII characters.
- blablabla123 14y agoNo problem, I was assuming printable anyway... ;) I just wanted to point out that it's possible to use VARCHAR even with weird characters.