Kovacs Zoltan <kovacsz(at)pc10(dot)radnoti-szeged(dot)sulinet(dot)hu> writes:
> However, if I enter the "clear text", unhashed password, I can enter the
> database.
That's the way it's supposed to work. Users shouldn't have to do the
hash calculation by hand, should they?
regards, tom lane