password parameters

Discussion in 'aMember Pro v.4' started by maximize, Mar 6, 2013.

  1. maximize

    maximize Member

    Joined:
    Mar 5, 2007
    Messages:
    108
    We are requiring a 14 charachter password when people sign up - we set that property in aMember config.

    If a user generates a password in their account though, it is only generating a 9 character password and that password won't work because it's not meeting the new requirements.

    We've had to revert to the 9 character password, but I don't like it. Is there a way to set it up in aMember to make the generate function match the config settings.

    And add this to the feature request: I'd like to force people to generate new passwords every XX days.

    As you can tell, I've been hacked (aMember 3) previously and we're doing everything we can to lock down our installation.
  2. alexander

    alexander Administrator Staff Member

    Joined:
    Jan 8, 2003
    Messages:
    6,279
    Latest version already should use 14 symbols as max value in generatePassword function:
    function generatePassword(){
    // a bit of configuration
    $min_length = max($this->getDi()->config->get('pass_min_length', 8), 8);
    $max_length = min($this->getDi()->config->get('pass_max_length', 12), 14);


    What aMember version do you have uinstalled.
  3. maximize

    maximize Member

    Joined:
    Mar 5, 2007
    Messages:
    108
  4. maximize

    maximize Member

    Joined:
    Mar 5, 2007
    Messages:
    108
    This is important too:

    And add this to the feature request: I'd like to force people to generate new passwords every XX days.
  5. alexander

    alexander Administrator Staff Member

    Joined:
    Jan 8, 2003
    Messages:
    6,279
    Please submit ticket to helpdesk with access info.

    I think this is better to implement such functionality as a plugin:
    http://bt.amember.com/issues/1139

Share This Page