Password-policy

A plugin wordpress for enhance the password policy.

Major features in Password-policy include:

• Disable the confirm Use of Weak Password checkbox for users.
• Enhance the password policy with multiple options like number of character.
• Force reset all password users

Upload the Password-policy plugin to your blog, activate it, and enjoy.

1.1.0

*Fix fatal error on activation when the configuration row does not exist yet (src/class.db.php).
*Fix duplicate insert of the configuration row on each activation (src/class.db.php).
*Use WP_User->ID instead of the deprecated WP_User->id (user reset page).
*Check the “full reset” checkbox with isset() to avoid an undefined index notice.
*Escape values in the views: esc_attr() for tokens and regex value, esc_url() for the documentation link.
*Fix the unclosed table rows (<tr/> replaced by </tr>) in the user reset page.
*Load translations from the languages/ folder.
*Add a French translation (languages/password-policy-fr_FR.po and .mo).
*Make the “User email” and “Username” column headers translatable.
*Reword the admin texts (configuration labels, user page, notices, reset email, plugin description).
*Point the regex documentation link to https://grafikart.fr/tutoriels/expression-reguliere-regexp-86.
*Add styles for the configuration page and the user reset page (public/style.css and public/style.scss).
*Rename the user reset button to “Reset passwords for selected users or roles”.
*Add a confirmation dialog before resetting passwords. It warns when all users, including administrators, are selected.
*Security: the user reset page now checks the WordPress nonce as well as the capability (manage_options) on both forms.
*Security: the session-based token (PSSP_Token, session_start) is removed in favour of the WordPress nonce.
*Sanitize every submitted value (absint, sanitize_text_field, wp_unslash) in the configuration and reset forms.
*Add an ABSPATH guard to every PHP file.
*Store the configuration with the WordPress options API instead of direct SQL queries.
*Role checkboxes now use the role slug, so custom roles with spaces are matched correctly.
*Translate and escape every string and output (Plugin Check fixes), and use the proper text domain for password-policy messages.
*Remove the hidden .htaccess file and add the License header.

1.0.9

*Some test and modif for new version of wordpress 6.8
*Update search tags

1.0.1

*Test wordpress 5.6
*Add Text Domain for i18n

1.0.0

*Correction from wordpress review

0.2

Release Date – 20 jun 2020
* Finish BackOffice

0.1

Release Date – 06 Mai 2020
* Init project.
* Disable confirm Use of Weak Password checkbox for users.
* Enhance the password policy with multiple options