panique/php-login — pull request #312 by RoonZ (2013-12-15 19:34:35+00:00)
Title: User enumeration #security

The "This USER does not exist" message can be used to check if a user exists in the database. This is called User enumeration. It's in the OWASP testing guide https://www.owasp.org/index.php/Testing_for_user_enumeration_%28OWASP-AT-002%29