By work77 on

As admin, I check marked "Verify password strength on server" as well as "Test password not same as username". Clicked Save. Then when I tested found the Javascript does everything correctly but neither of the above is checked on the server, and the bad passwords are allowed. Any suggestions.

Thanks.

⋅ Categories: Drupal 6.x

Comments

alan d.’s picture

alan d. commented

These are just suggestions for the user. I would assume there is a module that would help, but I do not personally know about one.

Alan Davison
work77’s picture

work77 commented

Hi. Thanks for responding. It seems a little misleading then that it reads, "Verify password strength on server...
Drupal should verify and enforce password strength on the server (i.e. not only in JavaScript)."

I could see where "verify" could mean a suggestion, as you stated. But I figured "enforce" would mean enforce. Seems silly that the admin can't actually REQUIRE that.

I guess I'll be checking out other modules.

thanks again.

work77’s picture

work77 commented

For anyone interested, the Password Policy module does it all! Thanks to whoever wrote it!

http://drupal.org/project/password_policy