https://bugzilla.wikimedia.org/show_bug.cgi?id=28085
--- Comment #27 from Tyler Romeo <[email protected]> --- Here is the only solution I think we should be willing to consider due to our privacy and security constraints: if and only if the given username/email matches a single unique account and the password is correct for that account, the user will be logged in. Otherwise a generic "Username/password combination is wrong" message is displayed. Ideally, I'd much prefer if this was implemented *after* gerrit 27022 and gerrit 27472 are merged, that way we're not persisting old and shaky architecture. I can probably make a patch on top of gerrit 27022 in a few hours if a lot of people want this fixed. -- You are receiving this mail because: You are on the CC list for the bug. _______________________________________________ Wikibugs-l mailing list [email protected] https://lists.wikimedia.org/mailman/listinfo/wikibugs-l
