231
"TIP: You can use special characters..." "Wait, no, not those, they would break our software." (i.ibb.co)
submitted 1 day ago by to c/softwaregore@lemmy.world
44 comments fedilink hide all child comments
 

https://konto.zssk.sk/zk/new#step1

Also, it only seems to show "Strong password" if any of these characters is used: !@#$%^&*, and not other special characters.

you are viewing a single comment's thread
view the rest of the comments
[–] 20 points 1 day ago*

it's worse. they're not even using query binding, they're just sticking the password into sql. a bound query would escape these characters properly, a raw query will just accept them as-is. they have a couple steps before they even get to hashing.

  • permalink
  • fedilink
  • source
  • parent