Loading...
 
Skip to main content

Does the PW blacklist actually work?

Status
Open
Subject
Does the PW blacklist actually work?
Version
18.x
Category
  • Support request
Feature
User Administration (Registration, Login & Banning)
Resolution status
New
Submitted by
hman
Lastmod by
hman
Rating
(0)
Description

Now that I found the tab with the password blacklist, I wanted to use it (to translate it - that was before I found out it is untranslateable).

I generated a custom (test) file of passwords to be banned. As the instruction says, a list with one banned password per line. I had two: "123456" and "test". Every one on a line of it's own. I uploaded the word list,

The counter of "Words currentyl indexed" remained at 0. I tried another setting than "Automatically select blacklist", there are many that claim "Word count: 1000". The counter of indexed words remained 0. Also tried "Create or Replace Word Index" and "Delete Temporary Index". The number of indexed words remained 0...

So does this thing actually work?

So far it did *not* block passwords 123456 and test...

Importance
6
Easy to solve?
1 difficult
Priority
6
Demonstrate Bug on Tiki 19+
Demonstrate Bug (older Tiki versions)
Ticket ID
7499
Created
Sunday 16 August, 2020 20:36:01 UTC
by hman
LastModif
Sunday 16 August, 2020 20:36:01 UTC


Show PHP error messages