Jump to content
TNG Community
Krisamd

Member sign in password

Recommended Posts

Krisamd

The members select their own password and there is no password setting requirement.

My members are insisting strong password requirement as they would be putting their family info.

I need Capital+small+numbers+special charactors (@,#,%,&,) and minimum 6charactors.

If members generating password does not meet the requirement, it should reject and give reasons.

Is there any solutions in TNG ?

Will appreciate feedback

Thanks

Kris

Share this post


Link to post
Share on other sites
Rob Severijns

Hello Krisamd,

 

in the Setup >> Configuration >> General Settings you can choose your encryption method.

In my opinion the best one to use is sha512 since it is better than md5.

In addition to that you should definitly use SSL on your website.

It creates a https:// sitename which is basicicly an absolute must if you generate personal data of people.

Not sure about what the regulations regarding GDPR are outside of Europe but my guess is that it's applicable for the USA as well.

TNG doesn't support forcing the use of Capital+small+numbers+special charactors (@,#,%,&,) and minimum 6charactors at the moment and I'm not sure if that is an absolute must if you apply the above meassures.

None the less it would be nice if TNG would be able to force that password format.

You could send Darrin a request for that.

 

Kind regards,

 

Rob 

Share this post


Link to post
Share on other sites
Michel KIRSCH

Don't know if it is useful :

When password is encoded in database, it is as md5 (or else)
md5 "encryption" is not reversible. It means that for one md5 encryption, it exists an infinity (minimum many, many) of possible passwords
.
Some special sites propose to decode your md5 encoded password, but it is based on databases with billions of "passwords".

if you choose "DonaldTrump#@@!!"  or "Portez ce whisky au juge blond qui fume" or "R2D2" as password,

it is possible (I repeat : possible) that their MD5 coding will be the same !
So I think that choosing a strong or weak password have no many sense...

Michel

Share this post


Link to post
Share on other sites
Michel KIRSCH

Yeah !

The Mod doesn't Load...

It was a Mod of Bart Degrijse. Some of his Mods are supported by Ken, but don't know for this one.

Ken, do you have this Mod? May be ot is possible to update it for tng 12+

 

Michel

Share this post


Link to post
Share on other sites
Michel KIRSCH

Searching in my statistics :

one member is using this Mod.

Try to contact him : http://genealogy.earthsky.ca

If you receive the Mod, please advise !

Michel

Share this post


Link to post
Share on other sites
Ken Roy

Bart's site is offline. I can find the mod for v8 but not that for version 9, unless he used a different file name than what is displayed on the wiki

Share this post


Link to post
Share on other sites
Krisamd

can you share the mod for v8

I have the code for validation of secure and strong password.

I need code addition in newaccountform.php  for  validating the password before attempting to fill other data.

In Bart's mode he is generating the code and leave the member to alter the code later.

I am proposing the member to enter code and system will validate the code.

Kris

Share this post


Link to post
Share on other sites
Michel KIRSCH

Ken, Kris,

This is the same Mod adapted for TNG v12.3.

Tested and works, but for now : No support !

A priori, it will be works in V13 too

Michel

password_generator_v12.3.0.1.zip

Share this post


Link to post
Share on other sites
Krisamd

I am concerned to uninstall and reinstall.

Many of the mods have added/modified cust_text.php in languages as also customconfig.php.

I am thinking to have backup of all affected files and start anew all mods one by one.

But is there any order for installing the following mods:

add_media_innermenu_v9.0.3.0.cfg

add_name_to_personid_v12.0.0.2.cfg

admin_media_search_v12.2.0.12c1.cfg

spouse-partner_label_V9.0.0.1.cfg

custom_menu_hook_v10.0.0.0.cfg

fgw_tabs_v11.0.0.9.cfg

gmaps_add_4_placelevels_v10.1.0.1.cfg

google_maps_15_v10.1.0.4.cfg

id_analysis_v11.0.0.3.cfg

maternal_paternal_lines_v11.0.0.2.cfg

media-2_show_table_v10.1.0.1.cfg

media-5_image_map_msg_v11.0.2.3.cfg

new_account_form_v10.0.0.1.cfg

random_photo_display_v12.0.1.4.cfg

randomphoto_template10_V10.0.0.0.cfg

regroup_person_profile_v12.0.0.18d.cfg

template_mgr_v12.2.0.0.cfg

user_footer_copyright_v12.1.0.9.cfg

user_footer_copyright_v12.0.1.8a.cfg

Thanks

Kris

Share this post


Link to post
Share on other sites
Michel KIRSCH

Hi Kris,

I'm actually reworking the Password Generator to makes it more user friendly..

For all the mods who change the files you indicate (cust_text.pgp and customconfig.php)

there is no special order (unless expressly mentioned)

Michel

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now

×