1ee8acf060
* Signup: if entering an existing email, don't admit that the email exists. Instead, send a specialized email to its address. * Search: no longer search for users by email address. * Login: always hash the incoming password on user not found, to take constant time compared to when the user did exist. * Fix a pagination bug when a private (shy account) views a non-friend's photo gallery. |
||
---|---|---|
.. | ||
certification.go | ||
edit_delete.go | ||
private.go | ||
site_gallery.go | ||
upload.go | ||
user_gallery.go | ||
view.go |