A website restricts these characters from passwords: # * ( ) %
At a casual glance, it looks like they're not sanitizing data input to the database or hashing passwords, but I'm a hobbyist.
Should I contact the IT maintainer? This is a new site that was just launched to replace an old one within my industry.
