Liberty Unleashed

Scripting => Module Releases => Topic started by: stormeus on November 17, 2011, 01:29:43 am

Title: Password Strength Checker
Post by: stormeus on November 17, 2011, 01:29:43 am

Password Strength Check Module ( mod_password )

A quick module I wrote from the Global Watchlist (http://forum.liberty-unleashed.co.uk/index.php?topic=913.0) source code, this module connects to Google's password rating API to rate a password's strength. It's very simple, and consists of only one function.

int GetPasswordStrength( string password, [bool ignoreLength [, string userName]] )
password     - The password, as a string
ignoreLength - If true, password length is not checked. (Optional and false by default.)
userName     - The username, which can be used for additional security checks. (Optional)

The function returns an integer from 0-4, or null if an error occurs. The ratings are as follows:

• 0 - Too short.
• 1 - Insecure.
• 2 - Okay.
• 3 - Good.
• 4 - Excellent.

Download (revision 2)
Combined Package (http://www.mediafire.com/?e3ltvzunyaljgnu) (Linux, Source, and Windows in one ZIP)

Quote

Archive
Revision 1
Combined Package ([url]http://www.mediafire.com/?jy3ntk5noq9i8o6[/url]) (Linux, Source, and Windows in one ZIP)

Title: Re: Password Strength Checker
Post by: 88nateatx on November 17, 2011, 01:50:52 am

wow, another nice module to fiddle around with  ;D

Title: Re: Password Strength Checker
Post by: Thijn on November 17, 2011, 07:36:50 am

Looks nice, Although I rather have this in plain squirrel.

Title: Re: Password Strength Checker
Post by: stormeus on November 17, 2011, 12:51:49 pm

Maybe when I get around to making Squirrel HTTP sockets. Otherwise, making a password checker like cracklib or Google's would be complex.

Title: Re: Password Strength Checker
Post by: Thijn on November 17, 2011, 04:40:55 pm

Quote from: stormeus on November 17, 2011, 12:51:49 pm

Maybe when I get around to making Squirrel HTTP sockets.

LU's Sockets? (http://liberty-unleashed.co.uk/LUWiki/Squirrel/Server/Functions#Socket_Functions)

Title: Re: Password Strength Checker
Post by: stormeus on November 17, 2011, 09:32:43 pm

I know, but I've tried making HTTP requests with variable success, usually unsuccessful, other times hard to parse.
EDIT: Generally, a module would be slightly faster anyways.

Title: Re: Password Strength Checker
Post by: stormeus on November 19, 2011, 03:51:24 am

The module has been updated to revision 2.

• A mid-level cache has been updated. The screenshot below should give a good idea of how effective it is.
• Lots of rewriting to use the standard namespace, like std::string.
• The username and password length limit has been removed since it is no longer necessary.
• Added type checking so you can't pass off null or 7 as a password. They must be strings. ignoreLength must be a bool.
• Windows DLL compressed using UPX (http://upx.sourceforge.net/). Reduced the filesize from 100+ KB to around 20 KB, and works properly.

Updating is not required, but recommended.
Bug reports always appreciated.

Cache Speed Testing
(http://i.imgur.com/E6Da9.png)