Password Expiration Policies

Here's a hack requested here by kreatiV.

What it does?
- The users will be prompted to change their password every XX days (configured using Admin CP)
before browsing the forums. You have the option to store old password in the DB to prevent
users to reuse them.
- You can customize the password expiration date using the Admin CP when editing a user.
Useful if you want to set the password expiration time for a user to NOW.
- Usergroup driven (new in 1.01)

What to do?
- 5 files to edit
- 4 new templates
- 3 queries to run
- 4 new settings in vBulletin Options

New Versi?n 1.01 (attachment updated):
The script is now Usergroup driven. You can specify what groups to apply the policy in Admin CP > User Groups > Modify > usergroup you want to edit > Password expires.

If you want to upgrade the script, follow the steps at the end of the file.



You can find some screenshots in the next post.

If you have any problem, suggestion, bug report, please post them here.

Enjoy.

[Mephisteus]

Finally, upload the file admin/expiry.php to your admin directory.

Where is this file?

[JulianD]

Originally posted by DarkSSJ3


Where is this file?

Damn, I really hate when I forgot something.

The ZIP has been uploaded in the first post.

[Bison]

I used the old one anyway ... working fine so far!

[Mephisteus]

Originally posted by JulianD


Damn, I really hate when I forgot something.

The ZIP has been uploaded in the first post.

thx

[partang2]

Might be usefull....

[spaceb]

hmm I have a little problem i installed the hack and it seems to work fine but now i added a new member from the control panel and he cant login he changed his pssword at least 10 times and still its asking him to change the pass and he cant do anything alway he only see the expire message :?

[JulianD]

Uhmm... Might be a bug... Let me check.

[Obi-Wan]

Kewl job man.

Definetly *install

[vwvitek]

I would like to use this hack for an online classroom, visited by my students from overseas, but I need an option which is not included in this hack yet: After expiration of the initial password, user MUST contact Admin to renew, otherwise he/she does not get into his account anymore. Under this option, the renewal should be following sequence of steps: (1) user with expired password gets a link to PM addressed to Admin with default text, requesting permission to renew password (2) Admin manually checks user's account as "eligible for one-time renewal" (3) After checking user's account, at the next login user's login screen changes from "Sorry, contact Admin ..." to regular password renewal screen (4) User logs into his account and renews his password.

Can you add this "no-renewal" option to your hack? I understand this add-on may not be attractive for everybody, so please contact me via e-mail if you would rather settle this add-on as a private project. Thanx for your good work, by the way!

[JulianD]

Hi vwvitek, it would require some modification to the hack, but let me see what can I do for you.