Re: php validate user password
| From: | Jan G.B. | Date: | Mon, 09 Feb 2009 17:42:10 +0000 |
| Subject: | Re: php validate user password | ||
| References: | 1 2 3 4 5 6 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-288002@lists.php.net to get a copy of this message | ||
2009/2/9 Stuart <stuttle@gmail.com>:
> 2009/2/9 Jan G.B. <ro0ot.w00t@googlemail.com>:
>> 2009/2/9 Stuart <stuttle@gmail.com>:
>>> I would also advise against stripping and trimming
>>> anything from passwords.
>>>
>> Trimming could be left out but it minimizes user errors and users
>> pretending to know their password.
>> (Like copy/paste from a passwords-file with added spaces on the end, etc..)
>
> Not sure what you mean by users pretending to know their password,
Well, as soon as you come into contact with the support team of a
quite big online store/community or so, you will see that there are
trillions of users pretending stuff you couldn't ever think of
before.. these people have the PEBCAK-Syndrome.. But that's quite
offtopic ..here. :-)
But I must admit - as a "power user" you would expect that whitespace
as a suffix or prefix would not be stripped.
Regards