Tickets :: Comment on [#12708] Password strength tests should be case insensitive

* Your Email Address
* Spam protection	Enter the letters below: .__ .__ . .. . __ [__)\| \\| \|\|\/\|/ ` \| \\|__/\|/\\|\| \|\__.
Comment	> Simple capitalization of password (e.g. "UserName") passes the > similarity strength test. > A case insensitive test would make the test more effective. > > > --- Horde/Auth.php.orig > +++ Horde/Auth.php > @@ -437,7 +437,7 @@ > // Check for percentages similarity also. This will catch > very simple > // Things like "password" -> "password2" or "xpasssword"... > foreach ($dict as $test) { > - similar_text($password, $test, $percent); > + similar_text(strtolower($password), strtolower($test), > $percent); > if ($percent > $max) { > throw new > Horde_Auth_Exception(Horde_Auth_Translation::t("The password is too > simple to guess.")); > } >
Attachment
Watch this ticket