Email is Taken

[nahtnam]

Does anyone else believe that the "Email is Taken" error message is bad? It gives away information that the email is signed up on the website which is NOT public information. Username is fine because everyone can see it, but email error should not say that.

[Str1x]

Does anyone else believe that the "Email is Taken" error message is bad? It gives away information that the email is signed up on the website which is NOT public information. Username is fine because everyone can see it, but email error should not say that.

What are you suggesting? Just an error message without the text? The error message should be there if you don't want multiple accounts on 1 email adress.If Theymos would remove the 1 account 1 email limitation than this forum is doomed to be spammed by account bots.

Maybe a suggestion would be to limit the amount of time you can try to make an account if the email is already used. In that way hackers can't just spamm different email adresses to check whether an email is linked to an account. Say if email account is taken -> wait 5 min to retry

[ahmadmoussa]

Does anyone else believe that the "Email is Taken" error message is bad? It gives away information that the email is signed up on the website which is NOT public information. Username is fine because everyone can see it, but email error should not say that.

No, i don't think it's a leak of information cause actually everyone could take that nickname. And the message " email is taken is necessary.

[nahtnam]

Does anyone else believe that the "Email is Taken" error message is bad? It gives away information that the email is signed up on the website which is NOT public information. Username is fine because everyone can see it, but email error should not say that.

What are you suggesting? Just an error message without the text? The error message should be there if you don't want multiple accounts on 1 email adress.If Theymos would remove the 1 account 1 email limitation than this forum is doomed to be spammed by account bots.

Maybe a suggestion would be to limit the amount of time you can try to make an account if the email is already used. In that way hackers can't just spamm different email adresses to check whether an email is linked to an account. Say if email account is taken -> wait 5 min to retry

No, that error should not be shown. Instead once the form is submitted it should say "If an account does not already exist, we will send you a confirmation email"

[BiiT MAster 666]

In my opinion, the error is not good, it should be corrected