Download the PHP package divineomega/laravel-password-security-audit without Composer
On this page you can find all versions of the php package divineomega/laravel-password-security-audit. It is possible to download/install these versions without Composer. Possible dependencies are resolved automatically.
Download divineomega/laravel-password-security-audit
More information about divineomega/laravel-password-security-audit
Files in divineomega/laravel-password-security-audit
Package laravel-password-security-audit
Short Description Laravel Password Security Audit
License LGPL-3.0-only
FAQ
Example:
In general, it is recommended to use always a project to download your libraries. In an application normally there is more than one library needed.
- Some hosting areas are not accessible by a terminal or SSH. Then it is not possible to use Composer.
- To use Composer is sometimes complicated. Especially for beginners.
- Composer needs much resources. Sometimes they are not available on a simple webspace.
- If you are using private repositories you don't need to share your credentials. You can set up everything on our site and then you provide a simple download link to your team member.
- Simplify your Composer build process. Use our own command line tool to download the vendor folder as binary. This makes your build process faster and you don't need to expose your credentials for private repositories.
Informations about the package laravel-password-security-audit
🔏 Laravel Password Security Audit
This package provides an Artisan command to audit the security of your users' passwords.
Supports Laravel 5.6 through 13 and PHP 7.1.3 through current releases. Audit output hides recovered passwords and hashes by default; use --show-secrets only in a controlled terminal when the extra data is genuinely required.
Laravel Password Security Audit works by executing a long running process that checks your users passwords against a list of over 10k commonly used weak passwords. When complete, it outputs a report of those users that are affected and the passwords that were found.
Installation
To install Laravel Password Security Audit, just run the following command from the root of your project.
Usage
In a standard Laravel installation using the default \App\User model, you can just
run the security:password-audit Artisan command.
While running a progress bar will be displayed indicating which user is being checked, and an estimate of how long the process will take to complete.
The speed of this process will take is dependent on the number of users your project has and your server's CPU performance. Multiple CPU cores will be taken advantage of if available.
When complete, you will be presented with the primary keys of users with weak passwords. Recovered plaintext passwords and hashes are deliberately hidden because terminal logs are often retained.
If sensitive output is required, run php artisan security:password-audit --show-secrets interactively and avoid redirecting or retaining its output.
Custom user model
If you've moved the User model, or want to check a different model, you can use
the --user-model option. See the following example.
Custom password field
If the passwords you wish to check are stored in a different field, you can change
this using the --password-field option. See the example below.
All versions of laravel-password-security-audit with dependencies
laravel/framework Version ^5.6 || ^6.0 || ^7.0 || ^8.0 || ^9.0 || ^10.0 || ^11.0 || ^12.0 || ^13.0
jord-jd/php-cli-progress-bar Version ^4.0
jord-jd/php-password-cracker Version ^3.0