Changeset 13189 for trunk/src/bp-members/bp-members-functions.php

Timestamp:

12/16/2021 06:16:38 PM (4 years ago)

Author:

imath

Message:

Introduce a new constant/filter to enforce strong password in BP areas

You can now use the BP_MEMBERS_REQUIRED_PASSWORD_STRENGTH constant or alternatively the 'bp_members_user_pass_required_strength' filter to force members to use password satisfying a strength score from 4 (strong) to 1 (weak). For instance use define ( 'BP_MEMBERS_REQUIRED_PASSWORD_STRENGTH', 4 ); to enforce strong passwords.

This setting will only be applied to these 2 BuddyPress specific areas:

• the registration form,
• the General User's front-end profile settings tab.

PS: this commit also removes completely the password-verify script from the BP Nouveau Template Pack which was deprecated since BuddyPress 5.0.

Props niftythree, dcavins

Fixes #8589

File:

• trunk/src/bp-members/bp-members-functions.php (modified) (1 diff)

trunk/src/bp-members/bp-members-functions.php

@@ -3764 +3764 @@
     return is_multisite() && in_array( bp_core_get_root_option( 'registration' ), $matches, true );
 }
+
+/**
+ * Returns the strength score a password needs to have to be used by a member.
+ *
+ * Score => Allowed Strength.
+ * 0     => any passwords.
+ * 1     => at least short passwords.
+ * 2     => at least weak passwords.
+ * 3     => at least good passwords.
+ * 4     => at least strong passwords.
+ *
+ * @since 10.0.0
+ *
+ * @return int the strength score a password needs to have to be used by a member.
+ */
+function bp_members_user_pass_required_strength() {
+    $default_strength = 0;
+    if ( defined( 'BP_MEMBERS_REQUIRED_PASSWORD_STRENGTH' ) && BP_MEMBERS_REQUIRED_PASSWORD_STRENGTH ) {
+        $default_strength = (int) BP_MEMBERS_REQUIRED_PASSWORD_STRENGTH;
+    }
+
+    /**
+     * Filter here to raise the strength score user passwords need to reach to be allowed.
+     *
+     * @since 10.0.0
+     *
+     * @param int $default_strength The strength score user passwords need to reach to be allowed.
+     */
+    return (int) apply_filters( 'bp_members_user_pass_required_strength', $default_strength );
+}