[MOD] Password lenght - SOLVED

[clubbu]

Hello,
I need to set the rule for the composition of the password:

minimum 8 characters
1 numeric character

To set the length of the password so I tried:

I haveif((strlen($password) < 8 || strlen($password) > 15) && $password!='')

setting a minimum length of 8 and a maximum of 15...

Unfortunately does not work

This control should work in register.php and update profile

You can also set the password expiration? (from code or admin panel?

Thanks for all

Paolo.

[V@no]

in member.php find:
  if ($current_user_password != $user_info['user_password']) {
    $msg .= (($msg != "") ? "<br />" : "").$lang['update_password_error'];
    $error = 1;
  }

Insert below:
  if (strlen($HTTP_POST_VARS['user_password']) < 8 || !preg_match("#[0-9]#", $HTTP_POST_VARS['user_password']))
  {
    $msg .= (($msg != "") ? "<br />" : "").$lang['update_password_minimum_error'];
    $error = 1;
  }


In register.php find:
    if ($user_password == "") {
      $msg .= (($msg != "") ? "<br />" : "").$field_error = preg_replace("/".$site_template->start."field_name".$site_template->end."/siU", str_replace(":", "", $lang['password']), $lang['field_required']);
      $error = 1;
    }

Insert below:
    if (strlen($user_password) < 8 || !preg_match("#[0-9]#", $user_password)) {
      $msg .= (($msg != "") ? "<br />" : "").$lang['update_password_minimum_error'];
      $error = 1;
    }


In lang/<your language>/main.php at the end add:
$lang['update_password_minimum_error'] = "Password must be minimum 8 characters long and contain at least one numeric character";


P.S.
Personally I don't understand the reason behind limiting maximum length of a password....I used to have a bank account where password requirement was 6 to 12 characters long...wtf? bank? seriously?

[clubbu]

Hello,
thank you for your help.

In Italy there is a specific regulation for the privacy of institutional website.

The Red Cross is part of these.

There are specific laws on password length, composition and encryption.

 

[V@no]

There are specific laws on password length, composition and encryption.

I just hope there is no law for the maximum length of a password...

[Sunny C.]

Thank you!!

[clubbu]

There are specific laws on password length, composition and encryption.

I just hope there is no law for the maximum length of a password...

Ahahah 

No no