Comments: on this page. Click to read or post your own.

Source for file PasswordValidator.php

Documentation is available at PasswordValidator.php

  1. <?php
  2.  
  3. /**
  4.  * This class represents a validator for member passwords.
  5.  * 
  6.  * <code>
  7.  * $pwdVal = new PasswordValidator();
  8.  * $pwdValidator->minLength(7);
  9.  * $pwdValidator->checkHistoricalPasswords(6);
  10.  * $pwdValidator->characterStrength('lowercase','uppercase','digits','punctuation');
  11.  * 
  12.  * Member::set_password_validator($pwdValidator);
  13.  * </code>
  14.  */
  15. class PasswordValidator extends Object {
  16.     static $character_strength_tests = array(
  17.         'lowercase' => '/[a-z]/',
  18.         'uppercase' => '/[A-Z]/',
  19.         'digits' => '/[0-9]/',
  20.         'punctuation' => '/[^A-Za-z0-9]/',
  21.     );
  22.     
  23.     protected $minLength, $minScore, $testNames, $historicalPasswordCount;
  24.  
  25.     /**
  26.      * Minimum password length
  27.      */
  28.     function minLength($minLength) {
  29.         $this->minLength = $minLength;
  30.     }
  31.     
  32.     /**
  33.      * Check the character strength of the password.
  34.      *
  35.      * Eg: $this->characterStrength(3, array("lowercase", "uppercase", "digits", "punctuation"))
  36.      * 
  37.      * @param $minScore The minimum number of character tests that must pass
  38.      * @param $testNames The names of the tests to perform
  39.      */
  40.     function characterStrength($minScore, $testNames) {
  41.         $this->minScore = $minScore;
  42.         $this->testNames = $testNames;
  43.     }
  44.     
  45.     /**
  46.      * Check a number of previous passwords that the user has used, and don't let them change to that.
  47.      */
  48.     function checkHistoricalPasswords($count) {
  49.         $this->historicalPasswordCount = $count;
  50.     }
  51.     
  52.     function validate($password, $member) {
  53.         $valid = new ValidationResult();
  54.         
  55.         if($this->minLength) {
  56.             if(strlen($password) < $this->minLength) $valid->error("Password is too short, it must be 7 or more characters long.", "TOO_SHORT");
  57.         }
  58.  
  59.         if($this->minScore) {
  60.             $score = 0;
  61.             $missedTests = array();
  62.             foreach($this->testNames as $name) {
  63.                 if(preg_match(self::$character_strength_tests[$name], $password)) $score++;
  64.                 else $missedTests[] = $name;
  65.             }
  66.             
  67.             if($score < $this->minScore) {
  68.                 $valid->error("You need to increase the strength of your passwords by adding some of the following characters: " . implode(", ", $missedTests), "LOW_CHARACTER_STRENGTH");
  69.             }
  70.         }
  71.         
  72.         if($this->historicalPasswordCount) {
  73.             $previousPasswords = DataObject::get("MemberPassword", "MemberID = $member->ID", "Created DESC, ID Desc", "", $this->historicalPasswordCount);
  74.             if($previousPasswords) foreach($previousPasswords as $previousPasswords) {
  75.                 if($previousPasswords->checkPassword($password)) {
  76.                     $valid->error("You've already used that password in the past, please choose a new password", "PREVIOUS_PASSWORD");
  77.                     break;
  78.                 }
  79.             }
  80.         }
  81.         
  82.         return $valid;
  83.     }
  84.     
  85. }
blog comments powered by Disqus

Documentation generated on Mon, 12 May 2008 15:15:52 +1200 by phpDocumentor 1.3.2