--- cacti-0.8.5/user_admin.php 2004-02-03 01:21:08.000000000 -0500 +++ cacti-0.8.6/user_admin.php 2004-03-09 01:03:44.000000000 -0500 @@ -125,8 +125,8 @@ raise_message(4); } - form_input_validate($_POST["password"], "password", "" . $_POST["password_confirm"] . "", true, 4); - form_input_validate($_POST["password_confirm"], "password_confirm", "" . $_POST["password"] . "", true, 4); + form_input_validate($_POST["password"], "password", "" . preg_quote($_POST["password_confirm"]) . "", true, 4); + form_input_validate($_POST["password_confirm"], "password_confirm", "" . preg_quote($_POST["password"]) . "", true, 4); $save["id"] = $_POST["id"]; $save["username"] = form_input_validate($_POST["username"], "username", "^[A-Za-z_0-9]+$", false, 3);