Password rules with the Validator?

2003-04-04 Thread Raible, Matt
Does anyone know of any open source packages or techniques for implementing password rules. For instance, I need to implement the following rules for password in my application: Passwords must be made up of at least three (3) of the four (4) following classes of characters: Lowercase letters,

Re: Password rules with the Validator?

2003-04-04 Thread David Graham
Users Mailing List [EMAIL PROTECTED] To: '[EMAIL PROTECTED]' [EMAIL PROTECTED] Subject: Password rules with the Validator? Date: Fri, 4 Apr 2003 15:56:57 -0700 Does anyone know of any open source packages or techniques for implementing password rules. For instance, I need to implement the following

RE: Password rules with the Validator?

2003-04-04 Thread Raible, Matt
: Password rules with the Validator? Validating passwords in javascript is a *very* bad idea. A hacker then has access to all your password rules and makes it easier to start guessing passwords. This is the reason validator doesn't provide a password validation. David From: Raible

RE: Password rules with the Validator?

2003-04-04 Thread Michael Marrotte
To: '[EMAIL PROTECTED]' Subject: Password rules with the Validator? Does anyone know of any open source packages or techniques for implementing password rules. For instance, I need to implement the following rules for password in my application: Passwords must be made up of at least three (3

RE: Password rules with the Validator?

2003-04-04 Thread David Graham
[EMAIL PROTECTED] To: 'Struts Users Mailing List' [EMAIL PROTECTED] Subject: RE: Password rules with the Validator? Date: Fri, 4 Apr 2003 16:06:46 -0700 I agree with the security risk, but since passwords will only be able to be set by Administrators (after they've logged in) security is not much