Don't allow Username Enumeration via requests

HotcakesCommerce / hotcakes-commerce-core

The core of the e-commerce part of the overall solution. This is an ecommerce shopping cart solution built on top of the DNN (DotNetNuke) CMS. Anyone can do commerce online now!

https://mmmcommerce.com

MIT License

69 stars 55 forks source link

Don't allow Username Enumeration via requests #316

Closed sniravj closed 3 years ago

sniravj commented 3 years ago

Some requests allows to discover registered usernames and email addresses via multiple method. Code fixes removes that issue.