Page Index Toggle Pages: 1 2 [3] 4 5  Send TopicPrint
Very Hot Topic (More than 25 Replies) Password Security SP1.1/SP1.2/SP1.3 (Read 30205 times)
Spikecity
God Member
*****
Offline


Beer anyone ?

Posts: 2630
Location: New York
Joined: Apr 16th, 2002
Gender: Male
Re: Password Security SP1.1/SP1.2/SP1.3
Reply #30 - Jun 10th, 2003 at 8:55pm
Print Post  
DocRST wrote on Jun 10th, 2003 at 2:49pm:
Rod,
What did you think about Password Policys

Nothing in particular as imposing a policy on users makes the password administration only harder.

If you enforce "impossible to guess and to memorize" passwords the amount of lost passwords will go up and people then tend to write it down which is again a possible breach of security.

So I'm not in favor of strict policy, however, not allowing username/password to be the same and minimum lenght should be OK.

Ron
  

Nothing to add here Smiley
Back to top
 
IP Logged
 
DocRST
God Member
*****
Offline


Dont get use to it!

Posts: 1846
Location: Oklahoma City
Joined: Aug 24th, 2002
Gender: Male
Re: Password Security SP1.1/SP1.2/SP1.3
Reply #31 - Jun 10th, 2003 at 8:58pm
Print Post  
And is that Modable?
  

Doc Cowles
Web Master
YourWebSpace.com  -  Free YaBB hosting
docrst@yahoo.com
Back to top
IP Logged
 
Spikecity
God Member
*****
Offline


Beer anyone ?

Posts: 2630
Location: New York
Joined: Apr 16th, 2002
Gender: Male
Re: Password Security SP1.1/SP1.2/SP1.3
Reply #32 - Jun 10th, 2003 at 9:03pm
Print Post  
DocRST wrote on Jun 10th, 2003 at 8:58pm:
And is that Modable?

Everything is modable, if you do not have a normal life outside Perl coding Grin
  

Nothing to add here Smiley
Back to top
 
IP Logged
 
DocRST
God Member
*****
Offline


Dont get use to it!

Posts: 1846
Location: Oklahoma City
Joined: Aug 24th, 2002
Gender: Male
Re: Password Security SP1.1/SP1.2/SP1.3
Reply #33 - Jun 10th, 2003 at 9:05pm
Print Post  
Grin
  

Doc Cowles
Web Master
YourWebSpace.com  -  Free YaBB hosting
docrst@yahoo.com
Back to top
IP Logged
 
wayland
Full Member
***
Offline


I love YaBB 1G - SP1!

Posts: 135
Location: Nashville
Joined: Jan 28th, 2002
Re: Password Security SP1.1/SP1.2/SP1.3
Reply #34 - Jun 11th, 2003 at 6:18am
Print Post  
Ron,

I hate to break the news to you, but unfortunately the latest fix you posted didn't solve the problem either.  Following the page where I answer the secret question, I still get the error message stating that the verification code is wrong.  Sad
  
Back to top
WWWAIM  
IP Logged
 
Spikecity
God Member
*****
Offline


Beer anyone ?

Posts: 2630
Location: New York
Joined: Apr 16th, 2002
Gender: Male
Re: Password Security SP1.1/SP1.2/SP1.3
Reply #35 - Jun 11th, 2003 at 10:39am
Print Post  
wayland wrote on Jun 11th, 2003 at 6:18am:
Ron,

I hate to break the news to you, but unfortunately the latest fix you posted didn't solve the problem either.  Following the page where I answer the secret question, I still get the error message stating that the verification code is wrong.  Sad


OK, found the error and tested now, so it should work.
The fixed version is at the same link as the last one (so in the previous message)
this should be the correct one.

The error was that I use three variables instead of two, but the first one was way up in the code so I overlooked it.

Proper installation sequence for users still having to install all three of them is:

1. Flooding Protection Mod V2.0
2. Password Security Mod 1.3.1
3. Fix for Password Security and Flooding.
  

Nothing to add here Smiley
Back to top
 
IP Logged
 
wayland
Full Member
***
Offline


I love YaBB 1G - SP1!

Posts: 135
Location: Nashville
Joined: Jan 28th, 2002
Re: Password Security SP1.1/SP1.2/SP1.3
Reply #36 - Jun 11th, 2003 at 4:48pm
Print Post  
Ron,
Now when I attempt to logout, I get the following error:

Bareword found where operator expected at ./SFCSources/LogInOut.pl line 214, near "fopen"
  
Back to top
WWWAIM  
IP Logged
 
Spikecity
God Member
*****
Offline


Beer anyone ?

Posts: 2630
Location: New York
Joined: Apr 16th, 2002
Gender: Male
Re: Password Security SP1.1/SP1.2/SP1.3
Reply #37 - Jun 11th, 2003 at 8:39pm
Print Post  
wayland wrote on Jun 11th, 2003 at 4:48pm:
Ron,
Now when I attempt to logout, I get the following error:

Bareword found where operator expected at ./SFCSources/LogInOut.pl line 214, near "fopen"

That's definitely not part of the code changes I did!
  

Nothing to add here Smiley
Back to top
 
IP Logged
 
wayland
Full Member
***
Offline


I love YaBB 1G - SP1!

Posts: 135
Location: Nashville
Joined: Jan 28th, 2002
Re: Password Security SP1.1/SP1.2/SP1.3
Reply #38 - Jun 11th, 2003 at 10:02pm
Print Post  
Ron,
When I remove the reg_fld_prot_password_sec_fix.mod, I can log out without receiving the error.     ???
  
Back to top
WWWAIM  
IP Logged
 
Outlaw
Full Member
***
Offline


I love YaBB 1G - SP1.2!

Posts: 191
Location: Essex County
Joined: Apr 9th, 2003
Gender: Male
Re: Password Security SP1.1/SP1.2/SP1.3
Reply #39 - Jun 12th, 2003 at 12:25am
Print Post  
Hey Ron,

Lookie what I get when I install it...

Quote:
Bareword found where operator expected at /Sources/LogInOut.pl line 314, near "fopen"
  
Back to top
 
IP Logged
 
Outlaw
Full Member
***
Offline


I love YaBB 1G - SP1.2!

Posts: 191
Location: Essex County
Joined: Apr 9th, 2003
Gender: Male
Re: Password Security SP1.1/SP1.2/SP1.3
Reply #40 - Jun 12th, 2003 at 12:31am
Print Post  
OK...found the problem...missing semi-colon.

In LogInOut.pl

Change This:
Code
Select All
$tempregdate = $FORM{'regdate'}  



To This:
Code
Select All
$tempregdate = $FORM{'regdate'};  

  
Back to top
 
IP Logged
 
Outlaw
Full Member
***
Offline


I love YaBB 1G - SP1.2!

Posts: 191
Location: Essex County
Joined: Apr 9th, 2003
Gender: Male
Re: Password Security SP1.1/SP1.2/SP1.3
Reply #41 - Jun 12th, 2003 at 12:39am
Print Post  
UGH! FRUSTRATING !!

The question and answer are not being saved properly... ARGGGGG!!!!
  
Back to top
 
IP Logged
 
Outlaw
Full Member
***
Offline


I love YaBB 1G - SP1.2!

Posts: 191
Location: Essex County
Joined: Apr 9th, 2003
Gender: Male
Re: Password Security SP1.1/SP1.2/SP1.3
Reply #42 - Jun 12th, 2003 at 12:42am
Print Post  
The script is encrypting the answer to the secret question... NOW WHAT!???

  
Back to top
 
IP Logged
 
Outlaw
Full Member
***
Offline


I love YaBB 1G - SP1.2!

Posts: 191
Location: Essex County
Joined: Apr 9th, 2003
Gender: Male
Re: Password Security SP1.1/SP1.2/SP1.3
Reply #43 - Jun 12th, 2003 at 12:43am
Print Post  
ALSO, after you try to retrieve your lost password, you get through the verification fill-in ok, and to the secret question screen, but the secret question does not show...
  
Back to top
 
IP Logged
 
Outlaw
Full Member
***
Offline


I love YaBB 1G - SP1.2!

Posts: 191
Location: Essex County
Joined: Apr 9th, 2003
Gender: Male
Re: Password Security SP1.1/SP1.2/SP1.3
Reply #44 - Jun 12th, 2003 at 1:52am
Print Post  
I give up... this is getting very frustrating.
  
Back to top
 
IP Logged
 
Page Index Toggle Pages: 1 2 [3] 4 5 
Send TopicPrint