Why some pages use only passwords that can only contain alphabetic and numeric characters?
lostdreamer
9:51 am on Dec 19, 2011 (gmt 0)
Most of the time it's because of lazy or unknowing programmers / admins.
You should NEVER tell people they can't have a strong password.... It should NEVER be needed.
rocknbil
4:50 pm on Dec 20, 2011 (gmt 0)
Only those two - agreed - however, the basic premise of security - keep only what you want and throw everything else away - eliminates many points of entry for potential hackers. It would indeed be lazy programming to simplify that statement to "just alphanumeric characters."
You should be able to enter "any normal keyboard characters" which may or may not be affected by the current language in use. These special characters - otherwise called metacharacters - are the wrenches hackers use to abuse your scripts for the nasty stuff. You must treat them like poison and add programming to insure they can only be used as "normal input."
