-
Improvement
-
Resolution: Fixed
-
Major
-
3.1.7-pl1, 3.2.0-b1
-
None
-
None
There is no point in having this setting, since there is no point in having a maximum password length.
It will just lower security for users if admins that don't know or don't care about this setting just let them as they are when the board is installed.
The few cases where way too long passwords can cause a DoS are catched with a hardcoded maximum length of 4096 which should be more than enough for everyone.
- is related to
-
PHPBB-11327 Implement reset password functionality via form instead of sending password
- Unverified Fix