Change wrong password message to wrong username OR password

libertysoft3 / saidit

The reddit open source fork powering SaidIt

https://saidit.net

Other

229 stars 40 forks source link

Change wrong password message to wrong username OR password #124

Closed CrystalVulpine closed 2 years ago

CrystalVulpine commented 2 years ago

Saidit currently gives "wrong password" even if the username doesn't exist. It should probably say username OR password, because either one could be wrong.

CrystalVulpine commented 2 years ago

This is being closed for now, there is a bug in it that allows you to delete an account without the password.

CrystalVulpine commented 2 years ago

Okay that bug is fixed now. For some reason reddit devs decided to rely on error messages to authenticate account deletion rather than actually checking those things directly.