Password complexity check for CB?

12 years 3 months ago #43097 by slabbi
It would be nice to have a password complexity check (maybe this can be integrated in a plugin).

Think of all your editors or publishers who might use a very weak password, so hackers might modify or delete content (I assume that administrators are sensible enough to use a good password ;)).

So it should be possible to select at least following:
- Password min. length: _6_
You password MUST contain:
- digits [ ] min. number: _1_
- lower case characters [ ] min. number: _1_
- upper case characters [ ] min. number: _1_
- special characters [ ] min. number: _0_

It would also be fine if the plugin does not offer any configuration dialog and the user can add a hardcoded function to the plugin:

E.g.
// returns true of the password fulfills your needs
function check_password(pass_entered)
bool ok = false;
// add your check here and set ok=true if the complexity is ok
return(ok)

So anybody could modify the plugin according his needs.

uddeIM & uddePF Development
Google+ profile: plus.google.com/u/0/b/117839921924782901705/
CB Language Workgroup
CB 3rd Party Developer
12 years 3 months ago #43343 by beat
any suggestion for a good implementation (same in javascript and in php) ?

Beat - Community Builder Team Member

Before posting on forums: Read FAQ thoroughly -- Help us spend more time coding by helping others in this forum, many thanks :)
CB links: Our membership - CBSubs - Templates - Hosting - Forge - Send me a Private Message (PM) only for private/confidential info
12 years 3 months ago #43372 by ford
A little inspiration (and inspiration only) can be found here :

http://drupal.org/project/password_policy

Some random thoughts:

No client-server data exchange. The password should not be sent back to the server for testing. All testing should be done by javascript alone. The result of the test could be displayed / rendered by javascript DOM manipulation alone.

The module should compile the javascript tester script dynamically, based on settings in the module.

Ford :-)
12 years 2 months ago #43773 by WebTrooper
If it was made of wood I could probably hack this...

extensions.joomla.org/component/option,com_mtree/task,viewlink/link_id,2410/Itemid,35/

but it's made of code, so maybe someone else can do it. ;)
12 years 2 months ago #43774 by beat
Thanks for the suggestions. I will look at them.

I'm really looking for a checking which can be done indendantly in javascript without server communication, and exactly the same implementation available in PHP for server-side check upon submit.

And of course if possible open-source.

Any other suggestions still welcome.

Beat - Community Builder Team Member

Before posting on forums: Read FAQ thoroughly -- Help us spend more time coding by helping others in this forum, many thanks :)
CB links: Our membership - CBSubs - Templates - Hosting - Forge - Send me a Private Message (PM) only for private/confidential info
Moderators: beatnantkrileon
Time to create page: 0.439 seconds
Facebook Twitter Google LinkedIn