Skip to content

Latest commit

 

History

History
19 lines (16 loc) · 2.07 KB

README.md

File metadata and controls

19 lines (16 loc) · 2.07 KB

plg_user_usernamecheck

This Joomla plugin checks that username spelling meets some requirements in user registration form:

  • Minimum number of characters
  • Maximum number of characters
  • username spelling compliant with user defined character presets.

###Instructions:

  • Click the "download zip" button and save it in your computer.
  • Install the plugin in your joomla! (3.x version) and enable it.
  • Configure settings and done !

###Why this plugin? At times, website administrators need usernames in their sites meet some restrictions. For example, the username being an e-mail, to be writen in a specific character set, or have a minimun and maximun number of characters. ####security concerns The advent of Unicode character set with more than hundred thousand ones, gives users the posibility of writing his/her real names in their modertongue languages. But it also gives a malicious user the posibility of deceiving a true user performing an Homoglyph Attack. This is done by copying the authentic username but changing some characters for those (among the hundreds thousand in Unicode) that looks the same and phishing inadvertedly (see this). To avoid this, you can choose the option "Unicode Security: Highly Restrictive level", allowing only one sigle language to be writen. For more info, see: M3AAWG Unicode Abuse Overview and Tutorial While it is not clear if Joomla will perform retrictions over username field in future, this plugin wants to fill the gap.

###Disclaimer: THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE. See the license.