Replying to Avatar Islamic Audiobooks Central

I read somewhere that it's a security measure. If the username/email is not found in the database, they don't have to show the password field to a potential attacker.
Avatar
Gus 2y ago

I think that's an anti pattern, you want to give as little information as possible. Meaning if the user does not exist, you want to make them believe it does.

Reply to this note

Please Login to reply.

Discussion

No replies yet.