Andy Staudacher dc94f6e45a Include user name in logging message for failed password reset. As Bharat points out, t() ensures that parameters are escaped for XSS.

2010-02-11 14:35:05 -08:00

..

admin_users.php

Fix up Admin_Users_Controller() form handling now that user_form.html

2010-02-06 09:30:45 -08:00

password.php

Include user name in logging message for failed password reset. As Bharat points out, t() ensures that parameters are escaped for XSS.

2010-02-11 14:35:05 -08:00

users.php

Fix for ticket 1010: Don't leak valid user names in "forgot password" form.

2010-02-11 13:11:31 -08:00