search

diefenbach / django-lfs

An online-shop based on Django
http://www.getlfs.com
BSD 3-Clause "New" or "Revised" License
622 stars 222 forks source link

User password not safe #122

Closed adeste closed 10 years ago

adeste commented 11 years ago

Users can register on a LFS site within a password of one only character. I suggest a minimum of five characters.

diefenbach commented 10 years ago

One or five characters doesn't make much difference if the user doesn't provide some special characters within his password. OTOH, I hate system which are trying to be smarter than the user and which are require some special formatted password.

I agree that the register process of LFS could be more pluggable, so that a developer would be able to provide his own RegisterForm or something like that.