Password choosing.

[Col]

Hello.

Someone on another forum that I visited brought up this idea, and the management of that forum liked the idea and is looking for a hack where:

When registering you MUST have a minimum of 6 letters in your password, but have at least 1 number in your password, in other words there must be numbers in your password, and also you must have uppercase and lowercased letters in your password. If their password does not contain 6 or more digits, have upper and lower case letters and at least 1 number, it won't let the person wanting to register, register.

This is for security issues.

Does anyone think they could make this?

Thanks,
Colin. :squareeyed:

[Marco van Herwaarden]

This would actually cause security issues.

Since the password is send to the server already hashed by the client, the password can not be checked by the server.

Checking would mean to introduce new (untrusted???) JavaScript routines to the client.