On Thursday, June 7, 2018, Eyedia Tech <
eyedia@debjyoti.com> wrote:
To replicate use this:
create table "user" (uname text, password chkpass);
insert into "user" values ('user1', 'password')
select * from "user" where uname = 'user1' and password = 'password1'
This is a major issue.
It is also a documented limitation.
The encryption uses the standard Unix function crypt()
, and so it suffers from all the usual limitations of that function; notably that only the first eight characters of a password are considered.
At this point I'd consider its presence here for backward compatibility only and as such the behavior is not something that is likely to be changed.
David J.