Hello Joe,

There is no check for a number in there at all....

^(?=.*[0-9]).{7,}$

should do the trick.

--
Jesse Houwing
jesse.houwing at sogeti.n

Joe
see this link
http://davidhayden.com/blog/dave/archive/2004/09/25/501.aspx
password complexity in your applications:
^.*(?=.{7,})(?=.*\d)(?=.*[a-z])(?=.*[A-Z])(?=.*[@#$%^&+=]).*$

The regular expression enforces the following rules:

 a.. Must be at least 7 characters
 b.. Must contain at least one one lower case letter, one upper case
letter, one digit and one special character
 c.. Valid special characters (which are configurable) are -   @#$%^&+=

Regards

Lue