Gossamer Forum
Home : Products : Gossamer Links : Discussions :

[suggestion] Better Password Scrutiny

Quote Reply
[suggestion] Better Password Scrutiny
I would like to suggest better in-build password selection scrutiny features. This is preferable than making javascript functions to do the same.

When a user signs up, you should be able to have Links check an unacceptable password list prior to allowing the user to submit it. This is better than just regex'ing it. You should be able to block words that:
  1. Are very easy to guess - common words like "password", words that are otherwise unacceptable
  2. Passwords shorter than a certain length
  3. Passwords which are identicle to the username
  4. Passwords which contain characters you don't want


I realise that you might be able to control the last 3 items with Regex but certainlly the first I don't think you can.

Perhaps this could also extend to the selection of acceptable usernames. The "unacceptable name" list could contain swear words etc, especially as usernames are generally seen in many places on people's websites.


http://www.iuni.com/...tware/web/index.html
Links Plugins
Quote Reply
Re: [Ian] [suggestion] Better Password Scrutiny In reply to
>>
I realise that you might be able to control the last 3 items with Regex but certainlly the first I don't think you can.
<<

Code:
my $bad = [qw/password easy to guess/];

if (grep { /^$password$/i } @$bad) {
error
}
Quote Reply
Re: [Paul] [suggestion] Better Password Scrutiny In reply to
Paul, you have this knack of making things look so easy all the time!

This is something I need to place in a plug in I guess Unsure. I could spend my life attempting to write plugins!

Thanks for the help and the code thoughSmile


http://www.iuni.com/...tware/web/index.html
Links Plugins