]> jfr.im git - irc/unrealircd/unrealircd-webpanel.git/commit
Security: check passwords against Have I Been Pwned
authorValerie Pond <redacted>
Fri, 5 Jul 2024 23:07:16 +0000 (07:07 +0800)
committerValerie Pond <redacted>
Fri, 5 Jul 2024 23:07:16 +0000 (07:07 +0800)
commit579020f8c67f7bdfd9d530a25b701af6ee53c412
tree8b55104e8ca28294966583e3c202d2ffd1a8b547
parente653740512b00c37a7fc19d9f41889f0844d6c68
Security: check passwords against Have I Been Pwned

This commit adds functionality to check with the API at https://haveibeenpwned.com to check if your password has been leaked as part of a data breach.

The check uses a k-Anonymity model and so does not share your password nor your password hash. Nice and safe.
Classes/class-paneluser.php
index.php
settings/user-edit.php