zxcvbn bootstrap password strength meter and secure headers mods

[Jeff]

Password Strength Meter modification


1. Copy and paste the code in the JS pane from https://codepen.io/Scally/pen/mqXXZz

Save with filename: zxcvbn-bootstrap-strength-meter.js

and put the js file in: users/js folder


The original js file can be found at https://github.com/martinwnet/zxcvbn-boo...ngth-meter

I have added this modification to disable the 'submit' button until a password has a Strong or Very strong value.


// modification to disable submit button on _join.php and _forgot_password_reset.php until password strength is Strong or Very Strong
if ( result.score < 3 ) {
$('#password_strength').prop('disabled', true);
} else {
$('#password_strength').prop('disabled', false);
}


One problem I have not been able to solve - the submit button only becomes disabled after an entry has been made in the password field, but the existing validation will not allow blank passwords.




2. Copy and paste the code in the HTML pane from https://codepen.io/Scally/pen/OOQQKq

Save with filename page_footer.php

and the put the php file in: users/includes

This is a modified version of page_footer.php from Userspice version 4.3.4

One problem - I have not been able to find an integrity value for the 'zxcvbn' password strength library file.






3. The remaining files are modified versions of files from Userspice version 4.3.4

Copy and paste the code in the HTML panes from each of these CodePens and save as php files:


modified version of _join.php - https://codepen.io/Scally/pen/JOpLoO
location: users/views folder




modified version of _forgot_password_reset.php - https://codepen.io/Scally/pen/qVxoOx
location: users/views folder




modified version of user_settings.php - https://codepen.io/Scally/pen/JOpLdM
location: users folder


I have found a problem with the original user_settings.php file:

When you update your user settings, and success messages are displayed on selecting Update, the updated values are saved but the screen does not show the updated values.