• Join/Login
  • Business Software
  • Open Source Software
  • For Vendors
  • Blog
  • About
  • More
    • Articles
    • Create
    • SourceForge Podcast
    • Site Documentation
    • Subscribe to our Newsletter
    • Support Request
SourceForge logo
For Vendors Help Create Join Login
SourceForge logo
Business Software
Open Source Software
SourceForge Podcast
Resources
  • Articles
  • Case Studies
  • Blog
Menu
  • Help
  • Create
  • Join
  • Login
  • Home
  • Browse
  • Gallery
  • Bugs
Gallery

gallery 1.5.1 passwordStrength calculation

Intuitive web based photo gallery

Brought to you by: bharat, ckdake
  • Summary
  • Files
  • Reviews
  • Support
  • Mailing Lists
  • Tickets ▾
    • Translations
    • Patches
    • Bugs
    • Feature Requests
  • News
  • Code
Menu ▾ ▴
  • Create Ticket
  • View Stats

Group

  • Gallery 1
  • Gallery 2
  • Gallery Remote

Searches

  • Changes
  • Closed Tickets
  • Open Tickets

Help

  • Formatting Help

#2449 gallery 1.5.1 passwordStrength calculation

Gallery 1
open
nobody
None
5
2010-03-28
2010-03-28
the0ne
No

gallery 1.5.1 has one errornous check in the passwordStrength calculation which leads to the fact that not-so-bad passwords cannot be used

[js/passwordStrengthMeter.js]
//password is just a nubers or chars
if (password.match(/^\w+$/) || password.match(/^\d+$/) ) score -= 10

[lib/valchecks.php]
//password is just a nubers or chars
if (preg_match('/^\w+$/', $password) || preg_match('/^\d+$/', $password)) {
$score -= 10;
}

the misconception here is that the preg of cause matches e.g.
h3llo
foob8r
etce1era
on the "just chars" check - that check (it's the first one in the code blocks above) is incorrect

Discussion


Log in to post a comment.

SourceForge
  • Create a Project
  • Open Source Software
  • Business Software
  • Top Downloaded Projects
Company
  • About
  • Team
  • SourceForge Headquarters
    1320 Columbia Street Suite 310
    San Diego, CA 92101
    +1 (858) 422-6466
Resources
  • Support
  • Site Documentation
  • Site Status
  • SourceForge Reviews
SourceForge logo
© 2026 Slashdot Media. All Rights Reserved.
Terms Privacy Opt Out Advertise