1ee8acf060
* Signup: if entering an existing email, don't admit that the email exists. Instead, send a specialized email to its address. * Search: no longer search for users by email address. * Login: always hash the incoming password on user not found, to take constant time compared to when the user did exist. * Fix a pagination bug when a private (shy account) views a non-friend's photo gallery. |
||
---|---|---|
.. | ||
account | ||
admin | ||
comment | ||
errors | ||
forum | ||
friend | ||
inbox | ||
partials | ||
photo | ||
about.html | ||
base.html | ||
chat.html | ||
contact.html | ||
faq.html | ||
features.html | ||
index.html | ||
markdown.html | ||
privacy.html | ||
tos.html |