Password Security SP1.1/SP1.2/SP1.3

Eliminate all plain ASCII storage of members' passwords.

Admin screen contains option to "Repair Passwords" which will automatically upgrade all existing plain passwords to encrypted versions, skipping the passwords which are already encrypted.

Adds "Secret Question / Answer" to Registration, Profile, and Forget Password sections. Forget password function has one more layer, after they enter their username they are presented with their secret question.  
If they answer correctly, a new password will be emailed to them. All Passwords and Secret Question answers are stored encrypted, no more plain ascii passwords anywhere!

Original Mod by Matthew C. Veno

Version History:
Version 1.1 Update - Bug Fix
Fixed bug where when Admin modifies users' profile the users' password and secret answer were changed and unusable.

Version 1.1SP1.1 (by Chrishartmann)
Mod modified for use with YaBB 1 Gold - SP1.1

Version 1.2SP1.2 (by DummyProof)
Mod modified for use with YaBB 1 Gold - SP1.2
Corrected Reminder Answer screen that would not show if "No Guest Access" was used.

Version 1.3SP1.3 (by DummyProof)
Mod modified for use with YaBB 1 Gold - SP1.3

For detailed installation information please open yabbpass.html included in the zip file.

DummyProof

A "cheap and dirty" way would be to force them to make the entry valid or they don't get to go any further than their Modify Profile page.

In YaBB.pl find this

&banning;            # Check for banned people
 

And add after it this

if ($username ne 'Guest' && !$settings[21] && $action ne 'profile' && $action ne 'profile2' && $action ne 'logout'){
        $mandatorytext = qq~Please modify your profile so that the "Secret Question" and "Answer" entries are valid.~;
        &fatal_error($mandatorytext);
}
 

After logging in they will go to the Board Index as usual, but if they try to go anywhere other than the their profile page they will get an error telling them:
"Please modify your profile so that the "Secret Question" and "Answer" entries are valid."

As you may or may not know, new users would be unaffected by this, as they are required to provide that info upon registering.

Dummy

Technically v1 was released by Matthew C. Veno.

Subsequent bug fixes and update versions are listed above.

Dummy

No difference from the last SP1.3beta.
The javacrypt.js is only for the yabbpass.html, not to be installed with the mod.

Dummy

Dummy,
I've discovered a compatibility issue between Password Security and Automatic Flood Protection. Here's the link to thread discussing the issue.

http://boardmod.yabbforum.com/yabb/YaBB.pl?board=modbugs;action=display;num=1054...

gwyden said:

Quote:


I reply...

BWAHAHAHAHA!

Forgive my laughter, but I asked almost the same question a little while back, and have close to 100 mods installed, and all had to done manually after about the first 10 or so.
MOST mods have to be individually tailored to work, trust me.

Thank the good Lord above for the great and selfless mod writers and users of this forum, because without them, most of us would have nothing but a basic YaBB, or another script.

I just found out that I may have to start over on my entire near 2 month to build script, due to a few minor problems that are just impossible (so i am told) to find and fix in my heavily modified script, so hang in there and learn all you can as you go

Ask your questions, and these good folks will surely help you find the answers.

Quote:


Thanks Dummy,
I think it would be rather inconvenient to uninstall the Password Security mod at this point, as it is not possible to automatically decode the encrypted passwords in the process. Once encrypted, always enrypted. Correct?

Quote:

Hé, Dummy, don't know who wrote password protection for SP1.3.1, but why is it always me who has to be compatible with everyone else, I comply to YaBB standard code which is enough!
I did not invent an extra step into the registration sequence and merely add code to standard YaBB code.
So my suggestion is that the one now taking care of PW prot mod should bend a little and be compatible with flooding protection

Ron