Correct usage in WordPress about zxcvbn-php HOT 5 OPEN

@KainiIndustries be careful here -- the JS will let through all kinds of passwords the PHP version will reject, your users will be pretty frustrated when the strength meter is green and the backend rejects the password as too weak.
As for the "infinite" require statements (welcome to WordPress development. ;) ):
We get around this by using Composer and it's autoload.php. Code from our plugin.php file:

<?php
/*
 * Plugin Name: Plugin
 * ...
 */
include_once 'vendor/autoload.php';

class My_Plugin {
...
}

from zxcvbn-php.

@Moring I would expect all the different implementations of Zxcvbn to behave similar. Do you know for sure that it is very different from the JS implementation?

from zxcvbn-php.

Yes, learned the hard way. The JS version was rating passwords as 4, like "DrSmithDentist2016" for a dental client name Dr. Smith. The PHP version did not. We had both running on the same page, and the JS frontend would validate, and the PHP backend would not. Clients were not very happy at all...

from zxcvbn-php.

#15 is the best issue to track getting to consistent scores between front-end and back-end implementations of a Zxcvbn-style of password strength estimation.

If this issue is about how to use zxcvbn-php within Wordpress will the OP confirm if so and if it's still a problem?

from zxcvbn-php.

#15 has now been merged, so the PHP library matches the JS library in terms of scoring.

Are you still having any issues getting this working in Wordpress?

from zxcvbn-php.