strengthening password requirements

Hi Ray, I'm trying to ensure website users use stronger passwords in future, so I've replaced the previous Entry Length validation on the attached registration page (which only set the min password length as 8 characters) with a Regular Expression validation - I want their passwords to be between 8 and 32 characters long and contain at least one uppercase character, one lowercase character, one digit and one special character. I added this to the server validations as follows:

$WAFV_Errors .= WAValidateRX(((isset($_POST["Registration_group_2_Password"]))?$_POST["Registration_group_2_Password"]:"") . "","^(?=.*[0-9])(?=.*[a-z])(?=.*[A-Z])(?=.*[*.!@$%^&(){}[]:;<>,.?/~_+-=|\]).{8,32}$",true,10);

However it's not accepting any password I try, however complex. Not sure what I've done wrong?

It looks good to me. What password are you trying? I did a quick test and the password: test1T!regex

seemed to pass the validation.

I tried Testing1regex! (plus various others) and it doesn't pass. The live page is in the PM if you want to try it there.

It looks like there are a few syntax errors in your regular expression particularly with what characters need to be escaped in your list of special characters. Try using this instead:

$WAFV_Errors .= WAValidateRX(((isset($_POST["Registration_group_2_Password"]))?$_POST["Registration_group_2_Password"]:"") . "","/^(?=.*[0-9])(?=.*[a-z])(?=.*[A-Z])(?=.*[*.!@$%^&\(\)\{\}\[\]:;<>,\.\?\/~_+-=\|]/).{8,32}$",true,10);

That still didn't work, it wouldn't accept any password I input, however complex. However I found something that did work, so I'm posting it here in case it helps anyone else:

WAValidateRX(((isset($_POST["Registration_group_2_Password"]))?$_POST["Registration_group_2_Password"]:"") . "","#.*^(?=.{8,20})(?=.*[a-z])(?=.*[A-Z])(?=.*[0-9])(?=.*\W).*$#",true,10);