Do not indicate if the user/email exists, in case of “Forgot password”

  • Rodrigo

    (@calvinyhobbes)


    9 months, 1 week ago

    Hello everyone!

    In the case of the “Forgot your password” option, the plugin may NOT indicate whether the user is valid or invalid, and, instead, just show the message “If the email xxx@xx.com exists, an email will be sent to reset the password” ?

    This is for a security issue.

    Thanks

  • The topic ‘Do not indicate if the user/email exists, in case of “Forgot password”’ is closed to new replies.