This issue has become a feature request for a new setting to be added that allows enabling better privacy on login/password reset forms. This will mean those who prefer usernames/email addresses not be revealed can enable that setting, and those who prefer the better UX of knowing what incorrect information was submitted to these forms can leave it disabled.
If I enter my username in the Reset Password form (/user/password
) and submit, I see this message:
Further instructions have been sent to your e-mail address.
If I enter a made-up username in the same form and submit, I get this:
Sorry, [made-up username] is not recognized as a user name or an e-mail address.
This basically tells people whether or not a given username or email address is in-use on the site. I see this as a (low) security issue and possible privacy issue.
I recommend instead giving something like the following message (like I've seen on other sites) whether a valid or invalid username/email address was entered:
If a matching account was found, further instructions have been sent to that account's e-mail address.
Recent comments
I had already moved my sites/default/files from my D7 site, but no image. All my other images populate. could it be a module issue? I will try merging again. see image below. the images is never...
ubercart shopping cart image missing
You may also want to double check that the image styles from UC Product came through correctly: - https://github.com/backdrop-contrib/ubercart/tree/1.x-3.x/uc_product/config
ubercart shopping cart image missing
Just to give you another option, but there is likely to be less support available for your D7 to Backdrop upgrade, Silkscreen CMS (https://github.com/silkscreencms/silkscreen, https://www....
How to import postgreSQL database in the backdrop cms using lando