A proof-of-concept for how bad it is to write your own password checkers...