Question

I’m trying to validate a password using javascript, It’s to make sure that when changing the password, the new password entered is equal to that of the re-entering of the new password (user is asked to enter their new password twice so both have to match) but at the same time, i want to make sure that the new password is at least 6 characters long, I have these functions separately but don’t know how to combine them… thanks for help in advance!

This is what i have so far…

This is to make sure the new passwords match:

function validatePassword()
    {
     var new_password = document.getElementById("new_password").value;
     var confirm_new_password = document.getElementById("confirm_new_password").value;
     <!-- if they match, go to next page -->
        if ( new_password == confirm_new_password)
          {
             return true;
          }
     <!-- if they don't match, an error message is displayed -->
        else
          {
               alert("Passwords do not match.");
          }
             return false;
    }

This is for length of password:

 function validatePassword()
    {
    if (document.getElementById("new_password").value.length < "5")
    {
    <!--If pasword is less than 5 characters long, display error message-->
    alert("Please ensure your password is at least 6 characters long.");
    return false;
    }
    return true;
    }

How do i combine both of these to form a SINGLE function where the two new passwords are checked so that they match, and also check that they are longer than 6 characters?

Answer 1

To just combine your two functions, this would work:

function validatePassword()
{
     var new_password = document.getElementById("new_password").value;
     var confirm_new_password = document.getElementById("confirm_new_password").value;

     if (new_password.length < 5)
     {
         <!--If pasword is less than 5 characters long, display error message-->
         alert("Please ensure your password is at least 6 characters long.");
         return false;
     }
     else if ( new_password != confirm_new_password)
     {
         alert("Passwords do not match.");
         return false;
     }
     else
     {
          return true;
     }
 }

Although I agree, there are better procedures out there. And please, make sure you’re doing server-side validation as well since client-side validation is very easy to skip around.