HN2new | past | comments | ask | show | jobs | submitlogin

This sort of approach will leak information about what usernames exist in the system, which has security implications.

Depending on the nature of the application you may or may not need to worry about this (e.g., obviously irrelevant if the site has a user list that shows the login names).



Most sign up forms give away that information anyway--try putting in a name or email that's already taken and you'll get a form validation error.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: