die "weak password"
    if length($pw) < 8 or
       not /[A-Z]/ or
       not /[a-z]/ or
       not /[0-9]/ or
       not /[^a-z0-9]/i;