1ee8acf060
* Signup: if entering an existing email, don't admit that the email exists. Instead, send a specialized email to its address. * Search: no longer search for users by email address. * Login: always hash the incoming password on user not found, to take constant time compared to when the user did exist. * Fix a pagination bug when a private (shy account) views a non-friend's photo gallery. |
||
---|---|---|
.. | ||
admin_impersonate.html | ||
already_signed_up.html | ||
base.html | ||
certification_admin.html | ||
certification_approved.html | ||
certification_rejected.html | ||
contact_admin.html | ||
reset_password.html | ||
verify_email.html |