I think cimb programmer use substr 8 then compare hash as first attempt and full str hash as 2nd attempt (after 8 char max removed).

Edit: Thats why they ask user to change password since the hash compare should be updated already.

This post has been edited by hans86: Dec 17 2018, 01:37 AM