@@ -, +, @@ --- .../intranet-tmpl/prog/en/modules/members/memberentrygen.tt | 5 +++++ .../prog/en/modules/onboarding/onboardingstep6.tt | 3 ++- members/memberentry.pl | 10 ++++++++++ 3 files changed, 17 insertions(+), 1 deletion(-) --- a/koha-tmpl/intranet-tmpl/prog/en/modules/members/memberentrygen.tt +++ a/koha-tmpl/intranet-tmpl/prog/en/modules/members/memberentrygen.tt @@ -131,6 +131,11 @@ [% END %] +[% IF passwordwarning %] +
+

Warning: [% passwordwarning %]

+
+[% END %]
[% UNLESS ( check_member ) %] --- a/koha-tmpl/intranet-tmpl/prog/en/modules/onboarding/onboardingstep6.tt +++ a/koha-tmpl/intranet-tmpl/prog/en/modules/onboarding/onboardingstep6.tt @@ -23,11 +23,12 @@

Congratulations you have finished and are ready to use Koha

Start using Koha [% ELSE %] +

Web installer › Set minPasswordLength system preference

+ [% INCLUDE 'onboarding_messages.inc' %] The minPasswordLength system preference is a setting for the shortest length library staff and patrons can set their passwords to. -
--- a/members/memberentry.pl +++ a/members/memberentry.pl @@ -171,6 +171,14 @@ $category_type="A" unless $category_type; # FIXME we should display a error mess # if a add or modify is requested => check validity of data. %data = %$borrower_data if ($borrower_data); +#Check passwords +my $minPasswordLength = C4::Context->preference('minPasswordLength'); +warn $minPasswordLength; +if ($minPasswordLength < 8) { + warn my $warning = "Your minPasswordLength system preference is less than 8 characters this means library patrons can potentially set passwords which are vulnerable to cracking. Please set your minPasswordLength syspref to 8 or more characters"; + $template->param("passwordwarning"=>$warning); +} + # initialize %newdata my %newdata; # comes from $input->param() if ( $op eq 'insert' || $op eq 'modify' || $op eq 'save' || $op eq 'duplicate' ) { @@ -365,6 +373,8 @@ if ($op eq 'save' || $op eq 'insert'){ push @errors, "ERROR_login_exist"; } + + my $password = $input->param('password'); my $password2 = $input->param('password2'); push @errors, "ERROR_password_mismatch" if ( $password ne $password2 ); --