admin/modules/admins.php

When creating a new Administrator account, the password strength check always fails.

Reproduce code:
---------------
Change Line 33 from:

if (!ereg('[0-9]', $_POST['add_pwd']) && !ereg('[a-z]', $_POST['add_pwd']) && !ereg('[A-Z]', $_POST['add_pwd'])) { cpg_error(_PASSWORD_MALFORMED, _CREATIONERROR); }

to [the code from the 10.x branch]:

if (!preg_match('#[0-9]#', $_POST['add_pwd']) && !preg_match('#[a-z]#', $_POST['add_pwd']) && !preg_match('#[A-Z]#', $_POST['add_pwd'])) { cpg_error(_PASSWORD_MALFORMED, _CREATIONERROR); }

Expected result:
----------------
Should accept a password meeting the strength criteria (min of upper letter, lower letter, and a number).

Actual result:
--------------
"Good" passwords always fail the check.

by: darkgrue