[Koha-bugs] [Bug 21314] Koha enforces three (3) character password length even if RequireStrongPassword is disabled

[bugzilla-daemon at bugs.koha-community.org]

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=21314

Marcel de Rooy <m.de.rooy at rijksmuseum.nl> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |m.de.rooy at rijksmuseum.nl

--- Comment #10 from Marcel de Rooy <m.de.rooy at rijksmuseum.nl> ---
+    if ( C4::Context->preference('RequireStrongPassword') ) {
+        $minPasswordLength = 3 if $minPasswordLength < 3;
+    }

How strong is that? LOL
Imo we should enforce at least 8 chars or so, and educate users that security
has a price.

-- 
You are receiving this mail because:
You are watching all bug changes.