Miscellaneous Hacks - Password Strength Check

What is it?
----------------------------
This mod adds a check for password strength at registration and when a user changes their password. You can specify the minimum length and number of upper case, digits, and other characters you want to require (see screen grab 3), or you can choose a minimum score to allow (based on length and types of characters included, see screen grab 4).

Installation:
----------------------------
1) Upload the files in the upload directory to the appropriate locations.

2) In the Product Manager in AdminCP, import the product XML file (product-kh99_passwords.xml).

3) In the admincp, go to "[kh99] Password Policy Options" and select the options you want.

Uninstalling:
----------------------------
1) Uninstall the product from the Product Manager in the AdminCP.

2) Remove the uploaded files.

Notes:
----------------------------
1) Tested on vb3.8.8. I also test a bit on vb3.8.2 (mostly for php version compatibility) and it seems to work.

History:
----------------------------
0.9.0 (October 14, 2013) - Initial Release

[Chris8]

Awesome addition! Thank you for sharing and caring about vb 3.8 series!

[Max Taxable]

Reserved.

How does this jell with registration timers and the like? How does it work for folks who run with javascript disabled on their browsers?

[kh99]

Originally Posted by Max Taxable

Reserved.

How does this jell with registration timers and the like? How does it work for folks who run with javascript disabled on their browsers?

Well, it's somewhat embarrassing, but I haven't tested it with any of the registration timer mods, so I'm not sure. I labeled it "beta", so I was kind of hoping people would try it out and report any problems. Maybe I'll try it if i get a chance (I'm working on the vb4 version right now).

As for people with no javascript, it will check on the server regardless of whether it's been checked by JS (unless you turn off that feature, which is an option although I don't really know why anyone would want to turn it off).

[Max Taxable]

Originally Posted by kh99

Well, it's somewhat embarrassing, but I haven't tested it with any of the registration timer mods, so I'm not sure. I labeled it "beta", so I was kind of hoping people would try it out and report any problems. Maybe I'll try it if i get a chance (I'm working on the vb4 version right now).

It might be actually a help for the timer checks, making people take longer to get the password right. This is if there's no conflict otherwise.

As for people with no javascript, it will check on the server regardless of whether it's been checked by JS (unless you turn off that feature, which is an option although I don't really know why anyone would want to turn it off).

Right but, how will the person with j/s disabled know if his/her password passes this check?

[kh99]

Originally Posted by Max Taxable

Right but, how will the person with j/s disabled know if his/her password passes this check?

He or she won't know until the form is submitted, then it will appear as an error (just like the existing "password fields don't match" error). On registration, it reloads the registration page and displays any errors, and on password change it tells you to press the "back" button and try again (those are the normal behaviors, I've just added additional error messages).

[jpsandiego]

Any chance this plugin has been made compatible with 4.2.2 and just not uploaded? XML shows only 4.0.0 and it throws lots of errors when I override to have it try loading in 4.2.2.

Samples:
Warning: fetch_template() calls should be replaced by the vB_Template class. Template name: kh99_password_rule in ..../includes/functions.php on line 4591
Parse error: syntax error, unexpected 'kh99_password_phrase_' (T_STRING) in path/includes/class_bootstrap.php(430) : eval()'d code(72) : eval()'d code on line 1
Warning: fetch_template() calls should be replaced by the vB_Template class. Template name: kh99_password_rule in ..../includes/functions.php on line 4591
Parse error: syntax error, unexpected 'kh99_password_phrase_' (T_STRING) in path/includes/class_bootstrap.php(430) : eval()'d code(72) : eval()'d code on line 1
Warning: fetch_template() calls should be replaced by the vB_Template class. Template name: kh99_password_rule in ..../includes/functions.php on line 4591
Parse error: syntax error, unexpected 'kh99_password_phrase_' (T_STRING) in path/includes/class_bootstrap.php(430) : eval()'d code(72) : eval()'d code on line 1
Warning: fetch_template() calls should be replaced by the vB_Template class. Template name: kh99_password_rule in ..../includes/functions.php on line 4591
Parse error: syntax error, unexpected 'kh99_password_phrase_' (T_STRING) in path/includes/class_bootstrap.php(430) : eval()'d code(72) : eval()'d code on line 1
Warning: fetch_template() calls should be replaced by the vB_Template class. Template name: kh99_password_policy in ..../includes/functions.php on line 4591

[kh99]

It will not work with vb4. The 4.0.0 in the xml is the first verson which is not compatible (that is, the version you have has to be less than the higher version). I was working on the vb4 version and got distracted, but since you're interested I'll try to finish it soon.

[jpsandiego]

Awesome news. I was starting to look at how to upgrade plugins between the versions. Not so much my wheelhouse. Appreciate the update!

[ForceHSS]

Would like to see this for 4.2.2 myself