At a minimum we should have the old behavior (so 99).  If we can do longer,
then go for it.  I'd just make sure the password field in the users table
can support whatever we're supporting in the PHP code.


On Mon, Nov 25, 2013 at 9:54 AM, Hannes Papenberg
<notifications@github.com>wrote:

> In libraries/cms/form/rule/password.php:
>
> > @@ -77,11 +77,8 @@ public function test(SimpleXMLElement $element, $value, $group = null, JRegistry
> >
> >  		$valueLength = strlen($value);
> >
> > -		/*
> > -		 * We set a maximum length to prevent abuse since it is unfiltered.
> > -		 * 55 is the length we use because that is roughly the maximum for bcrypt
> > -		 */
> > -		if ($valueLength > 55)
> > +		// We set a maximum length to prevent abuse since it is unfiltered.
> > +		if ($valueLength > 99)
>
> This is reverting the change that reduced it to 55 chars. It was 99 chars
> before. I'm open for changing this to something higher, but I'd like
> Michael to decide this one.
>
> —
> Reply to this email directly or view it on GitHub<https://github.com/joomla/joomla-cms/pull/2589/files#r7894354>
> .
>