Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

  • Congratulations gkittelson on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

Regular Pwd Changing 1

Status
Not open for further replies.

NevG

Programmer
Oct 10, 2000
162
GB
Hi gang

Can anybody please help me with the right method or procedure to get my users to change their login password regularlry. I have toyed with checking the date on at certain points in the month having them go and change it, accompanied by a session variable to see if they have changed otr not.

I have also toyed with the idea of cookies, but having never worked with cookies before am a little reluctanct to attack it without some advice.

Which is the easiest and most secure route to take ?

Thanks for any help

Nev
 
This is how I would approach the problem. Im not saying its the best way but these are my initial thoughts. Presuming you have a table somewhere that has fields Username and Password, I would add another field to that table which holds the date the password was last changed. Then, during your password authentication script you could check that the last changed date was less than a month ago (I have code to compare dates, let me know if you need it). If that is true the user can carry on, otherwise he gets redirected to the password change page.

What do you think?

G -GTM Solutions, Home of USITE-
-=
 
Hi G

Thats a great idea and I think I will use it :) If I have date compare problems I may bother you if you dont mind :)

Joanne
 
Status
Not open for further replies.

Part and Inventory Search

Sponsor

Back
Top