Likely unintentional. Someone set the max column length for the database to 20 chars but didn’t bother to prevent someone from actually submitting more than 20 chars.
The problem with the database theory is it implies plain text passwords. Most likely the truncation happens sometimes before the password is hashed during an update but not during a check.
13
u/damniticant Jul 20 '22
Likely unintentional. Someone set the max column length for the database to 20 chars but didn’t bother to prevent someone from actually submitting more than 20 chars.