My password strength criteria is as below :
(!@#$&*)
For PHP, this works fine!
if(preg_match("/^(?=(?:[^A-Z]*[A-Z]){2})(?=(?:[^0-9]*[0-9]){2}).{8,}$/", 'CaSu4Li8')){ return true; }else{ return fasle; }
in this case the result is true
Thsks for @ridgerunner