CB

The validation character lengths for username and password are hardcoded and ignore field settings when below a pre-set minimum such as 6 characters for password and 3 characters for username.

http://www.joomlapolis.com/component/option,com_joomlaboard/Itemid,38/func,view/id,101504/catid,78/limit,6/limitstart,6/