Protential security Hole

Hi guys,

this isn't a major security hole thought it would be wise to say..

say you have a password 4 charecters long ..

then if someone whats to get into your account and you dont have it in a folder outside the root folder ... ie they can download it....

they then can open the database.. look at the User_code and see what the last to letters are ...

say your password was help.  in the User_code it would have lp on the end.

so if someone really wanted to get in they would only have to look in a dictionary and go through all them.. you can tell how long the password is by looking at the salt code .... also common words they would try ..

the only thing i can suggest is take out the last 2 charecters from the usercode or use part of the encrypted password...

i would like to say it would take time to hack in but if they wanted to they could....

i know its  a bit far fetched but its a protential security hole

Read the documentation and you wont have any security problems.