Plugin Rejecting Solid Passwords

  • Resolved bullelephant

    (@bullelephant)


    12 years, 11 months ago

    Hey,
    I like this plugin a lot!
    One problem I am having with it is when I try to change a password on the users page, I get a warning “Password too common.”
    It gives me this on every password I try.
    An example:
    srZ@!RaL5xlY+pyA$46^

    Surely this is an acceptably strong password?
    Is there something I am missing?
    Right now I am turning off the plugin to change the passwords, then turning it back on.
    Any thoughts?
    You do good work, and this plugin rules!
    Thank you,
    Ian

    http://ww.wp.xz.cn/extend/plugins/login-security-solution/

Viewing 3 replies - 1 through 3 (of 3 total)
  • Plugin Author Daniel Convissor

    (@convissor)

    12 years, 11 months ago

    Hi Ian:

    I just updated my password to your example “srZ@!RaL5xlY+pyA$46^” and it was accepted. The “Password is too common.” error message is produced when the password tried fails the is_pw_dictionary() test.

    That means you have a file in the login-security-solution/pw_dictionaries directory that contains the password you’re trying. Or there’s a bug in my code that gets triggered
    by a file you have in one of your dictionary files. Feel free to send me your dictionary files. (See email address in the class level docblock in the plugin files.) Or better yet, dig into the code, add some debugging steps and see what’s happening. 🙂

    Do note, that some of the _other_ tests are run against the non-leet, alpha only password. So you may be gettting tripped up by that, but you’d be seeing different error messages.

    Thanks,

    –Dan

    Plugin Author Daniel Convissor

    (@convissor)

    12 years, 10 months ago

    Any luck, Ian?

    Plugin Author Daniel Convissor

    (@convissor)

    12 years, 10 months ago

    Ian:

    Closing this for lack of response. If you track down a problem with Login Security Solution, please reopen this thread.

Viewing 3 replies - 1 through 3 (of 3 total)

The topic ‘Plugin Rejecting Solid Passwords’ is closed to new replies.