The Joomla! Forum ™



Forum rules


READ ME <-- please read before posting, this means YOU.



Post new topic Reply to topic  [ 5 posts ] 
Author Message
PostPosted: Mon Jun 11, 2012 10:26 pm 
User avatar
Joomla! Intern
Joomla! Intern

Joined: Fri Nov 17, 2006 12:20 pm
Posts: 87
you are requiring users to have their password in some "hard to guess" format like this: "Password must be between 6 and 30 characters long, must contain letters in mixed case and must contain numbers.", but yet when I (every time) forget my auto-generated password for this forum, I always get a new one with all the letters in UPPERCASE :) so, you yourself don't follow those rules, but still you're imposing it on us, users, which btw, makes it harder for people to remember, because most of them are using the same passwords on most of forums like this one..

_________________
http://www.gusari.org


Top
 Profile  
 
PostPosted: Mon Jun 11, 2012 10:56 pm 
User avatar
Joomla! Guru
Joomla! Guru

Joined: Wed Nov 03, 2010 7:35 pm
Posts: 510
Location: Limassol, CY
Well mate , the auto-generated password is really something you can't remember, and the thing is that you will change your auto-generated password to something you prefer. Also many other forums require this password strength, and in my opinion it's not good to have same password everywhere.

_________________
Providing quality web design services since 2005!

Get direct Joomla! assistance, contact me on skype: mrcodexcy


Top
 Profile  
 
PostPosted: Tue Jun 12, 2012 6:47 am 
User avatar
Joomla! Intern
Joomla! Intern

Joined: Fri Nov 17, 2006 12:20 pm
Posts: 87
Maybe I wasn't clear :) I didn't mean that auto-generated passwords are making it harder to remember, but the rules for the more secure passwords are doing it, because a lot of people don't really care about remembering each password for a lot of forums they are registered on (they usually do it using the same e-mail/password for most of them) :)

but ok, you can always blame it on the security :) the point was to notice that your rules for passwords do not match your auto-generated passwords, which was funny :) that's all :)

btw, why do you not allow a user to have his/her password as weak as he/she likes? if you have a problem with brute force attacks, why not just install something like fail2ban or some other auto-banning utility, which will effectively stop any kind of such attempt more effectively (also saving your bandwidth) than enforcing some rules, that make passwords hard to remember for users. Also, fail2ban is very efficient for stopping spammers too, but it's your choice anyway. I'm just here complaining because I have to reset my password every time I access this forum :)

_________________
http://www.gusari.org


Top
 Profile  
 
PostPosted: Wed Jun 13, 2012 7:27 am 
User avatar
Joomla! Master
Joomla! Master

Joined: Wed Aug 17, 2005 10:27 pm
Posts: 14709
Location: Kent, England
[Mod note: Moved from General Forum to Sites and Infrastructure Forum;]


Top
 Profile  
 
PostPosted: Thu Jun 21, 2012 2:59 am 
Joomla! Apprentice
Joomla! Apprentice

Joined: Tue Jun 19, 2012 10:16 am
Posts: 8
I am sure that these things are set somewhere but I cannot find where... Please, Gurus, give me a clue where the settings are for passwords. My site has the password emailed but I would like to have the standard ability to choose your own now that I have set a captcha. I would also like to allow easy passwords. There is no reason for overly complex security as it causes insecurity.


Top
 Profile  
 
Display posts from previous:  Sort by  
Post new topic Reply to topic  [ 5 posts ] 



Who is online

Users browsing this forum: No registered users and 13 guests


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Jump to:  
Powered by phpBB® Forum Software © phpBB Group