Feature No Code Attached Yet
avatar joomleb
joomleb
1 Dec 2023

Hi guys,
PHP 8.1 + Joomla 4.4.1

The Registration page is grabbing the "Minimum Requirements" from
Joomla Users Options > Password Options > Minimum Password Length... etc. and appending them below the password1 label.

Here an image for you: https://photos.app.goo.gl/gmguWctFb2SHxBM97

The frontend Edit Profile page is not grabbing them for the same password1 field.

It should, Do you agree?

avatar joomleb joomleb - open - 1 Dec 2023
avatar joomla-cms-bot joomla-cms-bot - change - 1 Dec 2023
Labels Added: No Code Attached Yet
avatar joomla-cms-bot joomla-cms-bot - labeled - 1 Dec 2023
avatar brianteeman
brianteeman - comment - 1 Dec 2023

Why would it. The only requirement of the password confirmation field is that it is the same.

avatar joomleb
joomleb - comment - 1 Dec 2023

@brianteeman
Because the 2 password fields are into the Edit Profile in case I want to change my password (they are not there to save the Edit Profile form).

Now, there are two password fields:

  • password1 - it always must meet the "Minimum Requirements" from
    Joomla Users Options > Password Options > Minimum Password Length... etc.... Isn't it ?!? - if no, it would be a serious security issue to permit to a registered user to change a password as he wants (let me say 4 characterers instead of min.10 for example).
  • password2 - (password confirmation) as you wrote it has to be the same as the password1

So, If I'm the logged user and I want to change my password, I edit my profile and sure is quite I'm registering: I really don't remember the minimum requirements of that site !

For the same reason also the green bar at the bottom would be a must, as in the Registration form. As Frontend user I'm exactly in the same situation...

Am I missing anything?
Do you agree?

avatar brianteeman
brianteeman - comment - 2 Dec 2023

sorry I think I misunderstood the question

avatar joomleb
joomleb - comment - 2 Dec 2023

@brianteeman
(it can happen and it's never a problem, that's why we kindly explain it to each other).

About the issue, Do you agree ?

avatar brianteeman
brianteeman - comment - 2 Dec 2023

From what I can tell this has already been fixed in j5. If you could check and confirm

avatar joomleb joomleb - change - 2 Dec 2023
Title
[4.4.1 & 5] Password - Min requirements not grabbed
[4.4.1] Password - Min requirements not grabbed
avatar joomleb joomleb - edited - 2 Dec 2023
avatar joomleb joomleb - change - 2 Dec 2023
Status New Closed
Closed_Date 0000-00-00 00:00:00 2023-12-02 15:05:04
Closed_By joomleb
avatar joomleb joomleb - close - 2 Dec 2023
avatar joomleb
joomleb - comment - 2 Dec 2023

From what I can tell this has already been fixed in j5. If you could check and confirm

@brianteeman you are right, tested on new J 5.0.1 installation and I can confirm it (sorry)

avatar joomleb joomleb - edited - 4 Dec 2023
avatar joomleb joomleb - reopen - 4 Dec 2023
avatar joomleb joomleb - reopen - 4 Dec 2023
avatar joomleb
joomleb - comment - 4 Dec 2023

@brianteeman
Sorry, I'm reopening this to ask:
Cassiopeia is adding the "Min. Req." just below the password1 field label (the old password1 description position).
Would not be better to add it just below the 'green bar check" ? Like:
https://photos.app.goo.gl/yE3heDWqrEx5M6XR6
So the green bar and min. req. will be near...
Practically the "Min. Req." is quite the "green bar check description"...

avatar Hackwar Hackwar - change - 26 Mar 2024
Labels Added: Feature
avatar Hackwar Hackwar - labeled - 26 Mar 2024
avatar rdeutz
rdeutz - comment - 27 Apr 2024

Description is not a detailed that I could start developing, so converting it to discussion to define it more precise

avatar rdeutz rdeutz - change - 27 Apr 2024
Status New Closed
Closed_Date 2023-12-02 15:05:04 2024-04-27 12:14:40
Closed_By joomleb rdeutz
avatar rdeutz rdeutz - close - 27 Apr 2024

Add a Comment

Login with GitHub to post a comment