q2a/question2answer — pull request #14 by pupi1985 (2014-01-02 20:38:16+00:00)
Title: Improved login security by not informing if a user actually exists

If a user tries to login and receives 2 different errors, one for a not found user and one for a wrong password, then they will know that a user actually exists when they get a wrong password error. That is giving too much unnecessary information.

Also note this change will affect the language file(s).