? password_confirm_validate-398902-D6.patch
Index: includes/form.inc
===================================================================
RCS file: /cvs/drupal/drupal/includes/form.inc,v
retrieving revision 1.265.2.19
diff -u -p -r1.265.2.19 form.inc
--- includes/form.inc	22 Feb 2009 18:12:46 -0000	1.265.2.19
+++ includes/form.inc	13 Mar 2009 05:02:01 -0000
@@ -1621,7 +1621,9 @@ function password_confirm_validate($form
   $pass1 = trim($form['pass1']['#value']);
   if (!empty($pass1)) {
     $pass2 = trim($form['pass2']['#value']);
-    if ($pass1 != $pass2) {
+    // Passwords must match exactly.
+    // Use the typesafe operator to make a difference between 9 and 9.0
+    if (!($pass1 === $pass2)) {
       form_error($form, t('The specified passwords do not match.'));
     }
   }