K 10 svn:author V 4 ache K 8 svn:date V 27 1998-02-13T21:02:53.000000Z K 7 svn:log V 331 Fix very rare but dangerous bug: for some DES passwords crypt(real_password, salt) is equal to crypt("", salt); It means that this user (and not only he) can login without entering password at all, just pressing Return. So if empty password entered and crypted password is not empty, invalidate any crypt result by assigning ":" END