admin MDL-20980 Touched up regex that determines weak password salts

This commit is contained in:
Sam Hemelryk
2009-11-26 09:02:22 +00:00
parent 2ef1ead9d9
commit 75d4f4ef91
+1 -1
View File
@@ -762,7 +762,7 @@ function report_security_check_passwordsaltmain($detailed=false) {
$result->status = REPORT_SECURITY_WARNING;
$result->info = get_string('check_passwordsaltmain_warning', 'report_security');
} else if ($CFG->passwordsaltmain === 'a_very_long_random_string_of_characters#@6&*1'
|| trim($CFG->passwordsaltmain) === '' || preg_match('/^([\w]+|[\d]+)$/i', $CFG->passwordsaltmain)) {
|| trim($CFG->passwordsaltmain) === '' || preg_match('/^([a-z0-9]{0,10})$/i', $CFG->passwordsaltmain)) {
$result->status = REPORT_SECURITY_WARNING;
$result->info = get_string('check_passwordsaltmain_weak', 'report_security');
} else {