Forgot login page does inform you whether an account exists or not

arkham79

Hello,

Despite the note to the contrary, if you hit the re-send the password link on the forgot login page, it does appear to tell you whether the account exists or not. I discovered it completely by accident while trying to figure out if I had ever registered with an old e-mail address.

Cropped shot: http://imgur.com/9OndHfs

A.

Boards.ie: Danny

Indeed, nice catch. At one point we did have the system always return an "email sent" success message but found there were a lot of users entering usernames/emails that simply didn't exist. They would then get in contact with our hello@ email account to ask why they never received the mail. In short, it proved too confusing.

We'll edit the note on the forgot password page, thanks for informing us.

Danny

Boards.ie: Danny

The text on the forgot password page has been updated - thanks.

Danny