https://bugzilla.wikimedia.org/show_bug.cgi?id=28085
--- Comment #28 from Chris Steipp <[email protected]> --- (In reply to comment #27) > Here is the only solution I think we should be willing to consider due to our > privacy and security constraints: if and only if the given username/email > matches a single unique account and the password is correct for that account, > the user will be logged in. Otherwise a generic "Username/password > combination > is wrong" message is displayed. I agree. There are going to be too many issues if we try to guess the right account when multiple accounts have the same email address. -- You are receiving this mail because: You are on the CC list for the bug. _______________________________________________ Wikibugs-l mailing list [email protected] https://lists.wikimedia.org/mailman/listinfo/wikibugs-l
