Pete Finnigan's Oracle Security Forum


    
      
        Pete Finnigan's Oracle Security Forum
        (http://www.petefinnigan.com/forum/yabb/YaBB.cgi)
      

        Oracle Security >> Oracle Security >> Password Validation with REGEXP_LIKE
        
(Message started by: Pete Finnigan on Feb 4^th, 2010, 5:03pm)

Title: Password Validation with REGEXP_LIKE
Post by Pete Finnigan on Feb 4^th, 2010, 5:03pm

As anybody used REGEXP_LIKE to validate passwords?

I have a table with strings (i.e. passwords) but this select is not return any values.

select * from dept
where REGEXP_LIKE(LOC,'^.*(?=.*{9,})(?=.*\d)(?=.*[A-Za-z])(?=,*[_#]).*$'));

this should return strings with
at least 9 char
at least 1 digit
at least _ # special char
at least a lower or upper case char

Does any have any experience with this?

thanks,

Title: Re: Password Validation with REGEXP_LIKE
Post by Pete Finnigan on Feb 4^th, 2010, 5:06pm

Ok, typo.

select * from dept
where REGEXP_LIKE(LOC,'^.*(?=.*{9,})(?=.*\d)(?=.*[A-Za-z])(?=.*[_#]).*$'));