密码不能包含oracle数据库中的用户名或用户全名的一部分(pl/sq)

Question

实际上，我有一个小问题是我正在开发应用程序，其中注册用户的表单和验证结束密码不能包含用户名，并且不能包含连续的 2 个字母形式的用户名。 客户要求是通过存储过程来做到这一点。 例如，“zia123”不是用户“Zia”的合适密码

有人知道这个 PL?SQL 存储过程函数吗？

Answer 1

您可以尝试查看提供的 Oracle 密码验证功能，以帮助编写此类事情 - 12c 上的 ora12c_verify_function 和 ora12c_strong_verify_function。我在这里包含了一个old_password 参数，因为密码验证的一个常见要求是将新密码与旧密码进行比较。

CREATE OR REPLACE function verify_password_complexity
    (username varchar2,
     password varchar2,
     old_password varchar2)
return varchar2 IS
begin

   -- password must not contain user's name. 
   -- They didn't specify but I'm assuming their requirements want a case-insensitive check.
   if (upper(password) like '%' || upper(username) || '%') then
      return 'password contains username';
   end if;

   -- must not contains consecutive 2 letters from user's name
   for u in (select substr(username,level,2) as pair -- get all pairs of letters
                from dual
                connect by level <= length(username)-1)
   loop
      -- does password contain this pair
      if (upper(password) like '%' || upper(u.pair) || '%') then
        return 'password contains 2 consecutive letters from username: ' || u.pair;
      end if;
   end loop;

   return 'password OK';

end;
/

测试：

begin
  dbms_output.put_line(verify_password_complexity('testuser', 'lkajsdofiuwe', 'oiuwlkajsdf'));
  dbms_output.put_line(verify_password_complexity('testuser', 'lkajsdofiuwer', 'oiuwlkajsdf'));
  dbms_output.put_line(verify_password_complexity('testuser', 'lkatestuseruwe', 'oiuwlkajsdf'));
end;
/

password OK
password contains 2 consecutive letters from username: er
password contains username

Answer 2

例如一个函数：

SQL> create or replace function f_unpw (par_username in varchar2, par_password in varchar2)
  2    return varchar2
  3  is
  4    l_username varchar2(30)  := upper(par_username);
  5    l_password varchar2(30)  := upper(par_password);
  6    retval     varchar2(200) := 'Password is OK';
  7  begin
  8    if instr(l_password, l_username) > 0 or
  9       regexp_like(l_password, '[[:alpha:]]{2,}')
 10    then
 11       retval := 'Password contains username or two (or more) consecutive letters';
 12    end if;
 13
 14    return retval;
 15  end;
 16  /

Function created.

测试：

SQL> with test (un, pw) as
  2    (select 'zIA' , 'zia123' from dual union all
  3     select 'LF'  , 'x123bh' from dual union all
  4     select 'Test', '334d'   from dual
  5    )
  6  select un,
  7         pw,
  8         f_unpw(un, pw) result
  9  from test;

UN   PW     RESULT
---- ------ ----------------------------------------------------------------------
zIA  zia123 Password contains username or two (or more) consecutive letters
LF   x123bh Password contains username or two (or more) consecutive letters
Test 334d   Password is OK

SQL>

随意增强它。