5 ms·
Rather than forbidding those characters, you can go the facebook route and store multiple hashes for common typos. So if a user of your Polish website uses the
by mhaymo 12y ago
Rather than forbidding those characters, you can go the facebook route and store multiple hashes for common typos. So if a user of your Polish website uses the password "huntyr2", you store that hash and also the hash of "huntzr2", and allow access using either of those passwords.
- ajuc 12y agoMy server would explode if someone have choosen password like "zzzzzzzzzzzzzzzzzzzzzzz" :) Now that I think about that - I wonder how facebook deals with it? I guess only check "zzzzzzzz" and "yyyyyyyy", not all possible variations.