[wallee]

What characters should i allow in passwords or should i not restrict any at all? My concern is will my database be able to save german / spanish / russian letters or some special characters that i don't even know about? I don't want it getting bugged and people complaining they can't access their account ...

[Luke_James]

It doesn't matter, they're still ascii characters and your passwords should be hashed. You don't need to restrict anything.

[Vince]

If you use any decent hashing algorithm (i.e. not that udb_hash crap) then the output will be saved as a long hexadecimal string regardless of what the input is.

[wallee]

I use samp's sha function

Thanks all

[Luke_James]

SHA256 is fine but consider using salts for further security.