The forums ran from 2008-2020 and are now closed and viewable here as an archive.

Home Forums Back End Try out my first PHP web app! Reply To: Try out my first PHP web app!


Much nicer.

When login fails, you should not tell the user whether it was the username or password that was wrong: if I know that the username is good, I only have to guess passwords. If I don’t know which one is wrong (or if both are wrong), then I have a lot more work to do.