[BETA] Change Your Password Reminder 0.3.1

[alexi02]

MOD Title: Change Your Password Reminder
MOD Description: Reminders users to change their password after a certain number of days.
MOD Version: 0.3.1

MOD Features:
* Remind your users to change their password after x days
* If they fail to change their password once reminded, they will be re-reminded every x hours
* Users can disable this reminder if they want via their profile
* Admins can edit the user's reminder perference
* Admins can set the default password reminder setting for new users

MOD Download: Change Your Password Reminder v0.3.1 (10.2 KB)
Last Stable version: N/A

MOD Screenshot: ACP, Reminder Popup & Profile

MOD History:

2006-09-09 - Version 0.3.1
- No longer uses REPLACE WITH, so it should be more compatible with other mods.

2006-09-07 - Version 0.3.0
- Uses the CONFIG TABLE instead of a config file

2006-09-06 - Version 0.2.0
- Allows admins (in ACP) and users to change whether or not they wanted to be reminded about changing their password
- ACP now has an option to choose the reminder default for new users
- Bug Fix: New users registration wasn't meant to update the user_last_password_change

2006-09-05 - Version 0.1.0
- Initial Release (for phpBB 2.0.21)

Author Notes:
This MOD checks when was the last time the user changed their password and if the number of days specified by the admin has passed, a change your password reminder pops up for the user informing them the days they haven't changed their password for and asking them to change their password. If they haven't changed their password, it re-reminds them every x hours specified by the admin.

When a user logs in for the first time after this MOD was installed this MOD sets user_last_password_change to the current time.

This MOD adds new fields in the USERS TABLE, so that it will be able to tell when users last changed their passwords as phpBB doesn't keep track of this.

The user can choose in their profile whether they want to be reminded or not.


Please post any errors/improvements here.
Security is important, so I hope someone finds this useful.

alexi02.

[kber]

intersting one , i,ll test it

[dfritter4]

if you havent already, you should make it so that users can turn off password changing reminders.

i would get very fustrated if i kept getting notices about changing my password if i didnt want to change it.

[alexi02]

if you havent already, you should make it so that users can turn off password changing reminders.

i would get very fustrated if i kept getting notices about changing my password if i didnt want to change it.

I'm wondering if I should or shouldn't do this. If I did allow this I'm thinking that just about every user would turn this reminder off which would defeat the purpose of this mod as you would want all users to change their passwords regulary. Hmm

[dfritter4]

if you don't, i think people on your board would get very fustrated because i honestly know no-one who changes their phpBB password every x days.

and besides, if a hacker ever got into the phpBB database, the users' passwords are all md5 encrypted, so they would be of no use to the hacker.

[alexi02]

Well there's always the MD5 rainbow tables
My university always had us students changing our passwords every 6 months or so and that's why I thought this mod might be useful.

Anyway, I'm working on adding it to the users profile now

There's a bug when registering new accounts.
Here is the bug fix for those people using this mod (if any):

Code: Select all

# 
#-----[ OPEN ]------------------------------------------ 
#

includes/usercp_register.php

# 
#-----[ FIND ]------------------------------------------ 
#

// Start Change Your Password Reminder Mod

# 
#-----[ AFTER, ADD ]------------------------------------------ 
#

if (isset($user_id)) {

# 
#-----[ FIND ]------------------------------------------ 
#

// End Change Your Password Reminder Mod

# 
#-----[ BEFORE, ADD ]------------------------------------------ 
#

}

# 
#-----[ SAVE/CLOSE ALL FILES ]------------------------------------------ 
# 
# EoM

[alexi02]

All done. Maybe next I might think about using the config table instead of these config files.

2006-09-06 - Version 0.2.0
- Allows admins (in ACP) and users to change whether or not they wanted to be reminded about changing their password
- ACP now has an option to choose the reminder default for new users
- Bug Fix: New users registration wasn't meant to update the user_last_password_change

[Elias]

This is actualy good MOD. Because usualy hackers won't tell you that they hacked you and they'll just go on your name and do stuff you wouden't do.

[alexi02]

No need for a config file anymore.

2006-09-07 - Version 0.3.0
- Uses the CONFIG TABLE instead of a config file

[alexi02]

Small update for compatibility with other mods.

2006-09-09 - Version 0.3.1
- No longer uses REPLACE WITH, so it should be more compatible with other mods.