I see you have different error messages during login for:
invalid email address
user does not exist
invalid password
It might be better to return the same message for all so the hostile hacker can't learn as much about your users.
Rick
- [vchkpw] test copy of vpopmaild.c Ken Jones
- Re: [vchkpw] test copy of vpopmaild.c Marcin Soltysiak
- Re: [vchkpw] test copy of vpopmaild.c Marcin Soltysiak
- Re: [vchkpw] test copy of vpopmaild.c Rick Macdougall
- Re: [vchkpw] test copy of vpopmaild.c Rick Widmer
- Re: [vchkpw] test copy of vpopmaild.c Rick Widmer
- Re: [vchkpw] test copy of vpopmaild.c Ken Jones
- Re: [vchkpw] test copy of vpopmaild.c Rick Widmer
- Re: [vchkpw] test copy of vpopmaild.c Ken Jones
- Re: [vchkpw] test copy of vpopmaild.c Rick Widmer
- Re: [vchkpw] vpopmaild - errors on... Rick Widmer
- Re: [vchkpw] vpopmaild - error... Marcin Soltysiak
- Re: [vchkpw] vpopmaild - e... X-Istence
- Re: [vchkpw] vpopmaild - e... Marcin Soltysiak
- Re: [vchkpw] test copy of vpopmaild.c Charles Sprickman
- Re: [vchkpw] test copy of vpopmaild.c Ken Jones
- Re: [vchkpw] test copy of vpopmaild.c Charles Sprickman
- Re: [vchkpw] test copy of vpopmaild.c Marcin Soltysiak
- Re: [vchkpw] test copy of vpopmaild.c Jeremy Kitchen
- Re: [vchkpw] test copy of vpopmaild.c Rick Widmer
- Re: [vchkpw] test copy of vpopmaild.c Rick Macdougall