I have the following password policy:At least 8 characters in lengthAt least one digitAt least one special* character*I consider any character that is not a letter, digit or space to be a special character. I've come up with the following regex for enforcing this policy, and it seems to be working. ^(?=.*?[0-9])(?=.*?[^a-zA-Z0-9 ]).{8,}$Are there any drawbacks or pitfalls with my regex? 
Confirm regex for validating password policy
php;security;regex