search

benedmunds / CodeIgniter-Ion-Auth

Simple and Lightweight Auth System for CodeIgniter
http://benedmunds.com/ion_auth/
MIT License
2.35k stars 1.14k forks source link

Force user change password #1573

Closed marcelod closed 1 year ago

marcelod commented 1 year ago

Hello, do you know if there is something to force the user to change the password every month, for example, and not be able to use the last 3 passwords?

benedmunds commented 1 year ago

I'm not aware of any existing solution for this. To implement this you'd need to add a table storing the previous 3 password hashes as well as the update time for each, then check against that at next login or via a cronjob.

marcelod commented 1 year ago

Yes that's what I'm creating but doing in user login I check. Thanks