Password Security

Password Security

Description
This Hack allows you to enforce your members to use safe(r) Passwords:

• You can define a mimimum length
• You can define the how many character classes a Password must use
• Does not allow using Username or eMail-Address as Password
• Dictionary Check to prevent common passwords
  (Not yet fully implemented; Table wordlist must be filled manually, but check is present)

Details
1 Product XML (2 Plugins, 14 Phrases, 2 Settings)
2 Template Edits

History
1.0.0
Initial Version

1.0.1
Fixed problem with multiple Datamanager

1.0.2
Changed code to ignore automatically created weak passwords

first reply... GNI!

request for future: can this hack be modified to be using AJAX for the verif, instead of javascript plain ?!

thanks for this... greatly appreciate!

[Daniel]

o0o Very nice!

[Andreas]

@nexialys
Nope. That would mean having to transfer plaintext Passwords which is a no-no.

[sensimilla]

great hack

[bulbasnore]

cool, we'll definately need this when we get to 3.5
THANKS for doing this

so in preventing the use of screename as password, which, if any, of these does it prevent?

1. bulbasnore9
2. bulba9snore
3. 9bulbasnore
4. bulbasnoreZ
5. b.u.l.b.a.s.n.o.r.e.

Also, are there rules for the word list or is the list just matched verbatim (or perhaps case insensitive)?

All we need do with the list is just add a table with the words, yes?

[Dan]

Originally Posted by bulbasnore

cool, we'll definately need this when we get to 3.5
THANKS for doing this

so in preventing the use of screename as password, which, if any, of these does it prevent?

1. bulbasnore9
2. bulba9snore
3. 9bulbasnore
4. bulbasnoreZ
5. b.u.l.b.a.s.n.o.r.e.

Also, are there rules for the word list or is the list just matched verbatim (or perhaps case insensitive)?

All we need do with the list is just add a table with the words, yes?

I haven't qutie looked at this in great detail, but adding "dictionary" words... is there a way to mass add them or is it just one at a time?

[Andreas]

Currently there is no way to add any at all

@bulbasnore
None, as they are all different from your Username

[Dan]

Awe... I was looking forward to being bored and adding to it

[Col]

Great Hack, Well done