Our client has a requirement to blacklist the 10,000 most commonly used passwords, but unfortunately the password_policy schema was not equipped to deal with that amount of data.

The nice, easy solution is to change the config field in the database so it is "big". (How on earth do you say that and still make sense?)

Patch attached.

Support from Acquia helps fund testing for Drupal Acquia logo

Comments

Sophie.SK created an issue. See original summary.

Sophie.SK’s picture

Sophie.SK’s picture

Whoops. Wrong patch file *sighs*

AohRveTPV’s picture

Status: Needs review » Fixed

Thanks.

From looking at code, "big" for a text field translates to MySQL LONGTEXT, PostgreSQL text, and SQLite TEXT. The latter two are essentially unlimited length ("big" has no effect); the former is 4GiB. We could maybe get by with "medium", which translates to MySQL MEDIUMTEXT (16MiB), but the only upside (according to Stack Overflow) is saving one byte total of storage. And I suppose it is possible a blacklist would be greater than 16MiB. So "big" seems to make sense.

Status: Fixed » Closed (fixed)

Automatically closed - issue fixed for 2 weeks with no activity.