Details
-
Type:
Bug
-
Status:
Closed
-
Priority:
Minor
-
Resolution: Cannot Reproduce
-
Affects Version/s: 1.9.3
-
Fix Version/s: 1.9.6
-
Component/s: Authentication, Usability
-
Labels:None
-
Difficulty:Easy
-
Affected Branches:MOODLE_19_STABLE
-
Fixed Branches:MOODLE_19_STABLE
Description
If password policy is set, on the Moodle signup page users has prompted when a non-compliant password is entered.
Unfortunately, Moodle checks each policy one at a time, so if password policy is slightly more complex than simple total length, users are guided through a frustrating process of guessing policies, for example:
- a signing up user enter a password
- Moodle checks password length and if password is too short, warns user that the password is too short
- user re enter the password, according to length
- Moodle checks if password contains the required digits, and if the pass is not compliant warns user the password do not contain the required number of digits.
- user re enter the password, according to length and number of digits
- Moodle checks if password contains the required lower letters, and if the pass is not compliant warns user the password do not contain the required number of lower letters
- user re enter the password, according to length, number of digits and number of lower letters
- Moodle checks if password contains the required upper letters, and if the pass is not compliant warns user the password do not contain the required number of upper letters
- user re enter the password, according to length, number of digits, number of lower letters and number of upper letters
.......
.......
This frustrating process could be easily avoided making the password policy clear on the sign up page.
Please no more "Fix 1.9.4", we are very close to the release - only serious regressions will be fixed
thanks for the report!