[mistwang]

That's the limit of the DES algorithm used in crypt() function, only the first 8 characters of the password are used to generate the encrypted password, the rest are ignored.
I think Apache is the same, isn't it? :roll:

Thanks,
George Wang