in reply to Mind the meta!

Since when is a regex better than eq to check a password?

Cheers Rolf
(addicted to the Perl Programming Language and ☆☆☆☆ :)
Je suis Charlie!

Replies are listed 'Best First'.
Re^2: Mind the meta!
by Anonymous Monk on Mar 04, 2016 at 11:24 UTC

    Understand what you're saying, but the fc and \F are since v5.16.

    "Since when is it better to case-fold passwords?" :^)

      OK I missed the case insensitive /i part, mea culpa!

      > "Since when is it better to case-fold passwords?" :^)

      For me case folding of passwords is a reason to ignore a discussion thread ... ;-)

      Cheers Rolf
      (addicted to the Perl Programming Language and ☆☆☆☆ :)
      Je suis Charlie!

        The funny part is, I *almost* posted a joke reply to you above saying that eq was right out if you were using MySQL. Wasn't funny enough…

        More ideas for AnonyMonk and drive-bys. 1) LanX is being polite, case folding for passwords is a terrible idea that weakens security, 2) using case insensitive DB columns is a poor default and should be corrected or perhaps a more sane DB Engine chosen, 3) storing plain passwords is a heinous security practice.