Re: [EMAIL PROTECTED] Auth basic only compares first 8 chars

2007-06-09 Thread Tom Donovan
Mark Constable wrote: Using apache 2.2.4 with mod_auth_basic, mod_dbd and mod_authn_dbd (with apr-util compiled with sqlite3 support) it seems that only the first 8 characters of an incoming password are compared to the crypted version stored in the database! When you use the crypt algorithm, on

[EMAIL PROTECTED] Auth basic only compares first 8 chars

2007-06-08 Thread Mark Constable
Using apache 2.2.4 with mod_auth_basic, mod_dbd and mod_authn_dbd (with apr-util compiled with sqlite3 support) it seems that only the first 8 characters of an incoming password are compared to the crypted version stored in the database! Anyone else notice this with mod_auth_basic ? I'm just wond