Opened 9 months ago

Closed 8 months ago

#21778 closed enhancement (fixed)

Make it possible for plugins to enforce extra password strength / validity rules during the reset process

Reported by: westi Owned by: westi
Priority: normal Milestone: 3.5
Component: Users Version: 3.4.1
Severity: normal Keywords: has-patch
Cc:

Description

When you change your password or signup for a new account in a multisite install it is easy for a plugin to enforce extra rules by using one of the available filters for pre-validation of the POST data.

The Password Reset process doesn't have a a suitable hook.

Attachments (1)

21778.diff (1.0 KB) - added by westi 9 months ago.
Patch to rework the checking code and add a filter for more pluggable errors.

Download all attachments as: .zip

Change History (6)

westi9 months ago

Patch to rework the checking code and add a filter for more pluggable errors.

comment:1 follow-up: ↓ 2   scribu9 months ago

Why do you use do_action_ref_array() ?

comment:2 in reply to: ↑ 1   westi8 months ago

Replying to scribu:

Why do you use do_action_ref_array() ?

Probably because it is ingrained in my coding and it is how the code I based this on works - filters in the User Profile update validation.

comment:3 follow-up: ↓ 4   scribu8 months ago

No, I mean why do you use do_action_ref_array() instead of just do_action()? We're not in PHP4 anymore. :)

comment:4 in reply to: ↑ 3   westi8 months ago

Replying to scribu:

No, I mean why do you use do_action_ref_array() instead of just do_action()? We're not in PHP4 anymore. :)

I know, I was explaining why I made the mistake ;)

  • Resolution set to fixed
  • Status changed from new to closed

In [21923]:

Passwords: Make it possible for plugins to enforce extra password strength / validity rules during the reset process.

Adds a filter in the password reset process so that a plugin can enforce particular password rules on users to compliment the existing filtering in the Profile modification process.
Fixes #21778.

Note: See TracTickets for help on using tickets.