Home › Forums › Back End › Try out my first PHP web app! › Reply To: Try out my first PHP web app!
September 10, 2014 at 5:34 pm
#182555
__Participant
Much nicer.
When login fails, you should not tell the user whether it was the username or password that was wrong: if I know that the username is good, I only have to guess passwords. If I don’t know which one is wrong (or if both are wrong), then I have a lot more work to do.
