Advanced Password Rules

This hack allows you to set advanced rules for user passwords to increase member account security. You can enable/disable:

• The password cant be same with username
• The password cant be shorter than X characters
• The password must include both numbers and letters
• The password cant be all consecutive like 111111 or aaaaaa
• The password cant be years (eg. birth years) or the character sets you banned like 'qwerty' or '0000'

individually. Advanced password rules apply to new registering members and existing members who change their passwords.

The hack is Admin CP integrated so you can configure its options inside your Admin CP. (See screenshots below) It's compatible with all VB versions I know, feel free to try..

I coded this hack as a part of my "Advanced Board Protection Hack" (not released yet), however it become too complex, so I seperated this and make it an independent hack.

Click INSTALL if you install the hack, thx.

Enjoy...

Logician \\=^))

[Velocd]

pro
not sure about hack of the month, but it's still very useful.

[Chris M]

Thanks Logican!

Satan

[Boofo]

Will this hack work with bira's "Send Random Password Instead of Activation Code (v2.0)" hack?

[DrkFusion]

Nice work man, keep it up

Drk

[Logician]

Originally posted by Boofo
Will this hack work with bira's "Send Random Password Instead of Activation Code (v2.0)" hack?

I havent used Bira's hack but if it is not modifying "register.php" or "member.php" (which is very unlikely), yes they would work together without any problems..

[Boofo]

It sends users a random password rather than an Activation Code when they register. It does modfiy the member.php in the editprofile section. Not safe to use then, I take it?

Originally posted by Logician

I havent used Bira's hack but if it is not modifying "register.php" or "member.php" (which is very unlikely), yes they would work together without any problems..

[Logician]

Originally posted by Boofo
It sends users a random password rather than an Activation Code when they register. It does modfiy the member.php in the editprofile section. Not safe to use then, I take it?

I dont think so.. My hack modifies "updatepassword" section of member.php. If Bira hacks does not touch that part (I cant see a reason it will touch it), you can use them together..

[Boofo]

Ok, I instaklled it and have a question or two.

Here's the code you said to look for:

PHP Code:

4- edit register.php, find:
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
  if ($password!=$passwordconfirm) {
    eval("standarderror(\"".gettemplate("error_passwordmismatch")."\");");
    exit;
  } 


Here's the code from bira's hack:

PHP Code:

 // Send Random Password Instead of Activation Code (v2.0)
if ($randpassword=="0" and $password!=$passwordconfirm) {
// Send Random Password Instead of Activation Code (v2.0)

    eval("standarderror(\"".gettemplate("error_passwordmismatch")."\");");
    exit;
  } 


The member.php file had bira's hack in the update password part but it didn't look like it affected your code. I'm not sure though.

Also, I have a question about the wording in the Admin CP.

User password cant be same with username?

Does yes mean it CAN't be the same or does no mean that?

Password Complexity
Password can NOT be birthyears or custom ones you set below

Same with this one.

I just want to be 100 percent sure I'm not setting something wrong.

[Logician]

Originally posted by Boofo
The member.php file had bira's hack in the update password part but it didn't look like it affected your code. I'm not sure though.

It is ok, you can add my code after Bira's code, they wont clash..

Does yes mean it CAN't be the same or does no mean that?

If you set it to YES, password can not be same with username.. So to disable this check set it to NO..

Same applies to "Password Complexity": Yes enables it, while NO disables the check..

I just want to be 100 percent sure I'm not setting something wrong.

Sure thing hehe

[Boofo]

Thank you, sir!