Expected length of the name: 8
Expected length of the password: 8 - 12
Seriously?!
I won't even register now, and i would suggest no one else does it either.
Please do your trolling job somewhere else.
Cold regards
I was dead serious, why the HELL are you limiting the length of passwords?
I can only think of ONE reasons to such a limit:
1) Storing passwords in clear text (VARCHAR(12) for example)
It's pure idiotic to demand low security for passwords on a site that actually handles any kind of currency - virtual or not.EDIT: Tried out the site with something really, really low security - "password" is 8 chars.
Then the next issue came up - 20 chars limit for e-mails? WTF?
[email protected] makes exactly 20 chars.
I would suggest you to remove the password limit completly, the username limit is up to you - i don't really care.
And increase the e-mail limit to at least the double for people that actually have long emails.
EDIT2:
Also, learn to santize your inputs to avoid these kind of issues:
http://xkcd.com/327/Full XSS-vuln on
frontpage all pages, no CSRF protection,
possible SQL-injection issues.
Really, really, really bad security. No santizing of inputs WHAT so ever. Even possible to register with