Fork me on GitHub
Subscribe 4

Ticket #948 (fixed enhancement)

Require passwords with at least 6 characters

  • Created: 2014-02-04 19:58:34
  • Reported by: Studio384
  • Assigned to: Studio384
  • Milestone: 1.5.8
  • Component: security
  • Priority: normal

Currently, FluxBB requires passwords to have at least 4 characters. That is... not much. We should require more characters, 6 at least. Actualy, I prefer 8, but 6 is a good start. What do you guys think?

History

Franz 2014-02-04 20:31:40

Agreed.

seven 2014-02-08 08:28:47

What about hashing passwords with PHPass maybe? smile

Franz 2014-02-08 12:52:38

Hmm, we can't do that in 1.5.x due to backwards compatibility thing. We could update things like that in a 1.6 version.

Studio384 2014-02-08 18:12:47

Franz wrote:

Hmm, we can't do that in 1.5.x due to backwards compatibility thing. We could update things like that in a 1.6 version.

Well then, let's clear this up: are we going for a 1.5.7 feature release, or a 1.6 release? In the last case, you should rename this milestone.

Franz 2014-02-09 16:35:22

We'll have to apply the fixes to the 1.5 branch, too. Will sort out the milestones soon.

quy 2014-02-13 17:33:59

With signup and request new password, an 8 characters password is generated. Why not do it here too?

quy 2014-04-09 19:05:21

Commit e449827 to fluxbb master

#948: Require passwords to be at least 6 characters. Commit by Studio384.

quy 2014-04-09 22:46:45

  • Status changed from open to fixed.

quy 2014-04-09 22:47:00

Commit bede0b7 to fluxbb master

Merge pull request #104 from Quy/948

#948: Require passwords to be at least 6 characters. Commit by Studio384.

Franz 2014-10-20 11:51:06

  • Milestone changed from 1.5.7 to 1.5.8.