-- 2026-04-08: Store subscriber passwords + transaction PINs securely.
--
-- This repo previously stored:
-- - `subscribers.sPass` as a weak 10-char hash (or sometimes plain text)
-- - `subscribers.sPin` as plain text / numeric
--
-- The backend code now stores:
-- - `sPass` as bcrypt (`password_hash(..., PASSWORD_BCRYPT)`)
-- - `sPin` as "<pinLength>|<bcryptHash>" to preserve original length without adding a new DB column
--
-- Ensure the DB columns can store these longer values.

ALTER TABLE subscribers
  MODIFY COLUMN sPass VARCHAR(255) NULL;

ALTER TABLE subscribers
  MODIFY COLUMN sPin VARCHAR(255) NULL;

