Password Security

Password Security

Description
This Hack allows you to enforce your members to use safe(r) Passwords:

• You can define a mimimum length
• You can define the how many character classes a Password must use
• Does not allow using Username or eMail-Address as Password
• Dictionary Check to prevent common passwords
  (Not yet fully implemented; Table wordlist must be filled manually, but check is present)

Details
1 Product XML (2 Plugins, 14 Phrases, 2 Settings)
2 Template Edits

History
1.0.0
Initial Version

1.0.1
Fixed problem with multiple Datamanager

1.0.2
Changed code to ignore automatically created weak passwords

[WNxWakko]

how will this mod effect someone using password retrival? will it give them a pass not within the critera and then not work?

[Andreas]

Doesn't have any effect on password reset, only on passwords the user does chose.

[WNxWakko]

so if they do pass retrival and it doesnt follow the criteria I set, does that mean once they login with the new it will force them to change it?

[Andreas]

No. As said, it does not have any effect on system generated passwords.
But that's a good point, I hack to think about it if there is smth, that could be done.

[Moparx]

when the product is enabled and you try to use the Update User Titles and Ranks function the following error is made (i removed the actual paths for this post):

Updating user info...
Processing: 1

Fatal error: Cannot redeclare verify_password_secure() (previously declared in /path/to/includes/class_dm_user.php(163) : eval()'d code:3) in /path/to/includes/class_dm_user.php(163) : eval()'d code on line 3

[Andreas]

Wrap function verify_password_secure if

PHP Code:

if (!function_exists('verify_password_secure'))
{
} 


Will update the ZIP soon.

[Mastar]

Never Mind

[CSGG]

Originally Posted by nexialys

first reply... GNI!

request for future: can this hack be modified to be using AJAX for the verif, instead of javascript plain ?!

thanks for this... greatly appreciate!

Nice Very good

[bigmonay2k]

sound good dude

[Rabbitoh Warren]

This hack appears to interfere with users ability to reset their password should they forget it. I'll have to disable it for now.