Have-I-Been-Pwned

[SleePy]

Link to the mod

This enables checking passwords against the Have-I-Been-Pwned database. Passwords are only checked on registration and when changed on the profile.

Additionally this can attempt to check the password from the browser using the same API

SMF 2.1.0 or higher only! PHP 7.3 or higher only

[Shades.]

Nice!

What's the differences between "Enable Server based Have-I-Been-Pwned Checks" and "Enable Client based Have-I-Been-Pwned Checks" and should I have them both checked?

[SleePy]

Server side will have the server submit the checks to the api.  While client side will let the browser submit the checks.  The client side thus can do a more real time check while the server side is performed upon submission.  You can run both.

[Shades.]

Server side will have the server submit the checks to the api.  While client side will let the browser submit the checks.  The client side thus can do a more real time check while the server side is performed upon submission.  You can run both.

Ok thanks! Nice mod!