I've got a few sites with directories protected by http basic auth implemented via .htaccess files paired with .htpasswd files. I've noticed that with a password ending in "et!" I can get in by omitting the "t!", or replacing the ! with a 1.
Contents of my .htaccess file:
AuthType Basic AuthName "administration" AuthUserFile /var/www/conf/mysitename.com.pw require valid-user
I have two users in mysitename.com.pw.
Obviously this behavior isn't wanted. Any idea what's going on?