On Tue, Sep 13, 2011 at 12:27 PM, Anssi Kääriäinen
<[email protected]>wrote:

> On Sep 13, 8:24 pm, Adam Jenkins <[email protected]> wrote:
> > +1 on making the error say more than incorrect username/password. That
> > is confusing. In regards to leaking information about the user. The
> > error message in general could be changed to something like this, of
> > course with better wording:
> >
> > "Username and password incorrect or access to this page restricted".
>
> +1. This solves the problem nicely. the login does not leak
> information and the error message is correct.
>

I'm also +1 on this solution. Although maybe "is" should be inserted before
the word restricted.

Paul


>
>  - Anssi
>
> --
> You received this message because you are subscribed to the Google Groups
> "Django developers" group.
> To post to this group, send email to [email protected].
> To unsubscribe from this group, send email to
> [email protected].
> For more options, visit this group at
> http://groups.google.com/group/django-developers?hl=en.
>
>

-- 
You received this message because you are subscribed to the Google Groups 
"Django developers" group.
To post to this group, send email to [email protected].
To unsubscribe from this group, send email to 
[email protected].
For more options, visit this group at 
http://groups.google.com/group/django-developers?hl=en.

Reply via email to