OpenSanghaFoundation / OSF

Bug/Feature requests tracking and documentation managament
https://opensanghafoundation.org
0 stars 0 forks source link

[ultimatemember_password] buggy #55

Open OSFOSF opened 4 months ago

OSFOSF commented 4 months ago

[ultimatemember_password] allows passwords that do not match the requirements and then the user can not log in until they sigh in with a correct password

Describe the bug A clear and concise description of what the bug is.

To Reproduce Steps to reproduce the behavior:

  1. Go to '...'
  2. Click on '....'
  3. Scroll down to '....'
  4. See error

Expected behavior A clear and concise description of what you expected to happen.

Screenshots If applicable, add screenshots to help explain your problem.

Desktop (please complete the following information):

Smartphone (please complete the following information):

Additional context Add any other context about the problem here.

OSFOSF commented 4 months ago

added instructions as to what are the parameters for a password to the top of the password reset page. Passwords must be at least 8 characters long have at least one Capital letter have at least one lower case letter have at least one number have at least one special character this will tell the user what is needed for the password but the short code will allow anything and then later the user can not login.

this short code needs to be fixed by UM

coiby commented 4 months ago

I can't reproduce this issue. I reset a test account's password to a simple one and have successfully logged in using the new simple password.

coiby commented 4 months ago

Btw,

According to UM's documentation, the Users tab has the following option,

Require a strong password? This option allows you to require a strong password when a user resets their password using the password reset/forgot password process. You can enable or disable strong password rules common to all Ultimate Member forms. The password field on the registration form has the option to enable the force strong password. This option has no setting when changing the password on the account page.

I think the above option shall be related to this issue and OSF currently doesn't enable this option.

OSFOSF commented 4 months ago

there id a check box on UM settings->user to check strong passwords it was not set but now is so we can test this as solved Screenshot (40)

OSFOSF commented 4 months ago

Mikey and Coiby please test the UM password to see if the above fix to require strong paswords is working