> > Thanks for the help. > i recognized that we had our own customised auth_user and we missed > IS_NOTEMPTY validation for the password field. > The issue was resolved >
Note, if you're using the CRYPT() validator (you should be hashing the password somehow), it takes a min_length argument, so no need to use IS_NOT_EMPTY in addition. Anthony

