Password Expiration Policies
 

Here's a hack requested here by kreatiV.

What it does?
- The users will be prompted to change their password every XX days (configured using Admin CP)
before browsing the forums. You have the option to store old password in the DB to prevent
users to reuse them.
- You can customize the password expiration date using the Admin CP when editing a user.
Useful if you want to set the password expiration time for a user to NOW.
- Usergroup driven (new in 1.01)

What to do?
- 5 files to edit
- 4 new templates
- 3 queries to run
- 4 new settings in vBulletin Options

New Versi?n 1.01 (attachment updated):
The script is now Usergroup driven. You can specify what groups to apply the policy in Admin CP > User Groups > Modify > usergroup you want to edit > Password expires.

If you want to upgrade the script, follow the steps at the end of the file.



You can find some screenshots in the next post.

If you have any problem, suggestion, bug report, please post them here.

Enjoy.

Its kind of like the windows xp professional concept of changing your pass every month :D

Yes, you can use it for that purpose. Personally, I won't use it in my forums, but it might be useful to others :)

Here's the screen that appears when your password is expired

And Some Admin CP options.

Good hack, but I hope that nobody installs it on any board that I go to. I like having the same password. ;)

I don't know about installing it, it might be usefull for some forums... I don't know about mine though...

Nice idea, wont use it myself tho.

What do you guys mean? This is a hack EVERYONE should use! This would help in preventing someone from from stealing users Login info. I used to have a problem where someone would steal a users Nick Name cause they may have registered the same password at another board!

Great job!

It would increase security, but lots and lots of people find this very annoying

Thank god. I requested this like 4-5 months ago.

Excellent idea...

But it could be unpractial and a nuiscance for some members :)

Excellent hack nevertheless

- miSt

Is it possible to modify this to alert certain user groups instead? I would like to assign this for the moderator group...

Yes, it is possible... Let me see what can I do...

Thanks Julian! :p

This is a nice hack and would be useful if it was usergroup driven.

It would add security if your mods and admins had to change their password every so often :)

Done. Check the 1st post.

Youda Man Julian! I'll install and test!

is there a way i can set it so only admins and mods are forced to change passwords?

You can configure the admin and moderator usergroups to force the password change.

Where is this file?

Damn, I really hate when I forgot something.

The ZIP has been uploaded in the first post.

I used the old one anyway ... working fine so far!

thx :)

Might be usefull....

hmm I have a little problem i installed the hack and it seems to work fine but now i added a new member from the control panel and he cant login he changed his pssword at least 10 times and still its asking him to change the pass and he cant do anything alway he only see the expire message :?

Uhmm... Might be a bug... Let me check.

Kewl job man.

Definetly *install

I would like to use this hack for an online classroom, visited by my students from overseas, but I need an option which is not included in this hack yet: After expiration of the initial password, user MUST contact Admin to renew, otherwise he/she does not get into his account anymore. Under this option, the renewal should be following sequence of steps: (1) user with expired password gets a link to PM addressed to Admin with default text, requesting permission to renew password (2) Admin manually checks user's account as "eligible for one-time renewal" (3) After checking user's account, at the next login user's login screen changes from "Sorry, contact Admin ..." to regular password renewal screen (4) User logs into his account and renews his password.

Can you add this "no-renewal" option to your hack? I understand this add-on may not be attractive for everybody, so please contact me via e-mail if you would rather settle this add-on as a private project. Thanx for your good work, by the way!

Hi vwvitek, it would require some modification to the hack, but let me see what can I do for you.

OK, thanks!

NOp, it's working for me when I manually add an user. Maybe you missed some step?

hmm I dont think so but maybe it happens because another hack that i have installed? or something like this?

Yeah, it is possible... If you need any help, I'd need to know what hacks you've installed.

This is a great hack!

What would make it even better, is an option that can show you who hasn't re-activated there password in XX days.

bump.

hehe Thanks for your comments Jadelit. It's a good option to the hack... I might do it :)

=] Great to hear!

Just wanted to say that this is a fine hack, and it works very well! :)

Thank Again Julian!

I cant get it to work with vbb 2.2.9 I have no other hacks installed at the moment.

Admin CP shows everything correct but it try to force a user to change password it doesnt happen just acts like it isnt even in there I have redone the install procedure 3-4 times now and same thing.

Is it because of vbb 2.2.9?

any help is appriciated

thanks

Alan Higgs

http://www.prophecyguild.com/vbb