Sounds as if they couldn't afford even high school students to write the site, so they hired someone from a "rent a coder" site. This isn't stupidity, it's orders of magnitude worse. SQL injection? Even WordPress is better than that.
As far as the passwords themselves, that's a real shame, considering that using a different 20 character mixed alphanumeric password for each site is so trivial today - most password programs can generate at least that strong a password, and since they're all stored for future retrieval only one password has to be remembered.
As far as the passwords themselves, that's a real shame, considering that using a different 20 character mixed alphanumeric password for each site is so trivial today - most password programs can generate at least that strong a password, and since they're all stored for future retrieval only one password has to be remembered.
