[BETA] Change Your Password Reminder 0.3.1

A place for MOD Authors to post and receive feedback on MODs still in development. No MODs within this forum should be used within a live environment! No new topics are allowed in this forum.
Forum rules
READ: phpBB.com Board-Wide Rules and Regulations

IMPORTANT: MOD Development Forum rules

On February 1, 2009 this forum will be set to read only as part of retiring of phpBB2.
Post Reply
alexi02
Registered User
Posts: 271
Joined: Fri Mar 05, 2004 2:15 am
Location: Australia
Contact:

[BETA] Change Your Password Reminder 0.3.1

Post by alexi02 »

MOD Title: Change Your Password Reminder
MOD Description: Reminders users to change their password after a certain number of days.
MOD Version: 0.3.1

MOD Features:
* Remind your users to change their password after x days
* If they fail to change their password once reminded, they will be re-reminded every x hours
* Users can disable this reminder if they want via their profile
* Admins can edit the user's reminder perference
* Admins can set the default password reminder setting for new users

MOD Download: Change Your Password Reminder v0.3.1 (10.2 KB)
Last Stable version: N/A

MOD Screenshot: ACP, Reminder Popup & Profile

MOD History:

2006-09-09 - Version 0.3.1
- No longer uses REPLACE WITH, so it should be more compatible with other mods.

2006-09-07 - Version 0.3.0
- Uses the CONFIG TABLE instead of a config file

2006-09-06 - Version 0.2.0
- Allows admins (in ACP) and users to change whether or not they wanted to be reminded about changing their password
- ACP now has an option to choose the reminder default for new users
- Bug Fix: New users registration wasn't meant to update the user_last_password_change

2006-09-05 - Version 0.1.0
- Initial Release (for phpBB 2.0.21)

Author Notes:
This MOD checks when was the last time the user changed their password and if the number of days specified by the admin has passed, a change your password reminder pops up for the user informing them the days they haven't changed their password for and asking them to change their password. If they haven't changed their password, it re-reminds them every x hours specified by the admin.

When a user logs in for the first time after this MOD was installed this MOD sets user_last_password_change to the current time.

This MOD adds new fields in the USERS TABLE, so that it will be able to tell when users last changed their passwords as phpBB doesn't keep track of this.

The user can choose in their profile whether they want to be reminded or not.


Please post any errors/improvements here.
Security is important, so I hope someone finds this useful.

alexi02.
Last edited by alexi02 on Sat Sep 09, 2006 4:25 am, edited 5 times in total.
User avatar
kber
Registered User
Posts: 986
Joined: Sun May 07, 2006 9:22 am
Location: Egypt
Contact:

Post by kber »

intersting one , i,ll test it
User avatar
dfritter4
Registered User
Posts: 479
Joined: Wed Jul 20, 2005 6:39 pm
Location: Ohio
Contact:

Post by dfritter4 »

if you havent already, you should make it so that users can turn off password changing reminders.

i would get very fustrated if i kept getting notices about changing my password if i didnt want to change it.
alexi02
Registered User
Posts: 271
Joined: Fri Mar 05, 2004 2:15 am
Location: Australia
Contact:

Post by alexi02 »

dfritter4 wrote: if you havent already, you should make it so that users can turn off password changing reminders.

i would get very fustrated if i kept getting notices about changing my password if i didnt want to change it.


I'm wondering if I should or shouldn't do this. If I did allow this I'm thinking that just about every user would turn this reminder off which would defeat the purpose of this mod as you would want all users to change their passwords regulary. Hmm :?
User avatar
dfritter4
Registered User
Posts: 479
Joined: Wed Jul 20, 2005 6:39 pm
Location: Ohio
Contact:

Post by dfritter4 »

if you don't, i think people on your board would get very fustrated because i honestly know no-one who changes their phpBB password every x days.

and besides, if a hacker ever got into the phpBB database, the users' passwords are all md5 encrypted, so they would be of no use to the hacker.
alexi02
Registered User
Posts: 271
Joined: Fri Mar 05, 2004 2:15 am
Location: Australia
Contact:

Post by alexi02 »

Well there's always the MD5 rainbow tables ;)
My university always had us students changing our passwords every 6 months or so and that's why I thought this mod might be useful.

Anyway, I'm working on adding it to the users profile now :)

There's a bug when registering new accounts.
Here is the bug fix for those people using this mod (if any):

Code: Select all

# 
#-----[ OPEN ]------------------------------------------ 
#

includes/usercp_register.php

# 
#-----[ FIND ]------------------------------------------ 
#

// Start Change Your Password Reminder Mod

# 
#-----[ AFTER, ADD ]------------------------------------------ 
#

if (isset($user_id)) {

# 
#-----[ FIND ]------------------------------------------ 
#

// End Change Your Password Reminder Mod

# 
#-----[ BEFORE, ADD ]------------------------------------------ 
#

}

# 
#-----[ SAVE/CLOSE ALL FILES ]------------------------------------------ 
# 
# EoM
alexi02
Registered User
Posts: 271
Joined: Fri Mar 05, 2004 2:15 am
Location: Australia
Contact:

Post by alexi02 »

All done. Maybe next I might think about using the config table instead of these config files.

2006-09-06 - Version 0.2.0
- Allows admins (in ACP) and users to change whether or not they wanted to be reminded about changing their password
- ACP now has an option to choose the reminder default for new users
- Bug Fix: New users registration wasn't meant to update the user_last_password_change
User avatar
Elias
Registered User
Posts: 5147
Joined: Sat Feb 25, 2006 4:31 pm
Location: In the Water!
Name: Elias

Post by Elias »

This is actualy good MOD. Because usualy hackers won't tell you that they hacked you and they'll just go on your name and do stuff you wouden't do.
"Mystery creates wonder, and wonder is the basis of man's desire to understand." - Neil Armstrong
|Installing Extensions|Writing Extensions|Extension Validation Policy|
alexi02
Registered User
Posts: 271
Joined: Fri Mar 05, 2004 2:15 am
Location: Australia
Contact:

Post by alexi02 »

No need for a config file anymore.

2006-09-07 - Version 0.3.0
- Uses the CONFIG TABLE instead of a config file
alexi02
Registered User
Posts: 271
Joined: Fri Mar 05, 2004 2:15 am
Location: Australia
Contact:

Post by alexi02 »

Small update for compatibility with other mods.

2006-09-09 - Version 0.3.1
- No longer uses REPLACE WITH, so it should be more compatible with other mods.
Post Reply

Return to “[2.0.x] MODs in Development”