=== Password-policy ===
Contributors: kirua78
Tags: password policy, custom password policy, security, user security
Requires at least: 5.0
Tested up to: 7.1
Requires PHP: 7.4
Stable tag: 1.1.0
License: GPLv2 or later
Text Domain: password-policy

A plugin wordpress for enhance the password policy.

== Description ==

A plugin wordpress for enhance the password policy.

Major features in Password-policy include:

* Disable the confirm Use of Weak Password checkbox for users.
* Enhance the password policy with multiple options like number of character.
* Force reset all password users

== Installation ==

Upload the Password-policy plugin to your blog, activate it, and enjoy.

== Changelog ==

= 1.1.0 =
*Fix fatal error on activation when the configuration row does not exist yet (src/class.db.php).
*Fix duplicate insert of the configuration row on each activation (src/class.db.php).
*Use WP_User->ID instead of the deprecated WP_User->id (user reset page).
*Check the "full reset" checkbox with isset() to avoid an undefined index notice.
*Escape values in the views: esc_attr() for tokens and regex value, esc_url() for the documentation link.
*Fix the unclosed table rows (`<tr/>` replaced by `</tr>`) in the user reset page.
*Load translations from the languages/ folder.
*Add a French translation (languages/password-policy-fr_FR.po and .mo).
*Make the "User email" and "Username" column headers translatable.
*Reword the admin texts (configuration labels, user page, notices, reset email, plugin description).
*Point the regex documentation link to https://grafikart.fr/tutoriels/expression-reguliere-regexp-86.
*Add styles for the configuration page and the user reset page (public/style.css and public/style.scss).
*Rename the user reset button to "Reset passwords for selected users or roles".
*Add a confirmation dialog before resetting passwords. It warns when all users, including administrators, are selected.
*Security: the user reset page now checks the WordPress nonce as well as the capability (manage_options) on both forms.
*Security: the session-based token (PSSP_Token, session_start) is removed in favour of the WordPress nonce.
*Sanitize every submitted value (absint, sanitize_text_field, wp_unslash) in the configuration and reset forms.
*Add an ABSPATH guard to every PHP file.
*Store the configuration with the WordPress options API instead of direct SQL queries.
*Role checkboxes now use the role slug, so custom roles with spaces are matched correctly.
*Translate and escape every string and output (Plugin Check fixes), and use the proper text domain for password-policy messages.
*Remove the hidden .htaccess file and add the License header.

= 1.0.9 =
*Some test and modif for new version of wordpress 6.8
*Update search tags

= 1.0.1 =
*Test wordpress 5.6
*Add Text Domain for i18n

= 1.0.0 =
*Correction from wordpress review

= 0.2 =
*Release Date - 20 jun 2020*
* Finish BackOffice

= 0.1 =
*Release Date - 06 Mai 2020*
* Init project.
* Disable confirm Use of Weak Password checkbox for users.
* Enhance the password policy with multiple options