This site makes extensive use of JavaScript.
Please enable JavaScript in your browser.
Live
PTR
10.2.7
PTR
10.2.6
Beta
[suggestion] change login error message
Post Reply
Return to board index
Post by
lianzhu
Hi WowHead,
wowhead gives 2 error messages for loginfailure:
1: Username does not exist on Wowhead.
2: Invalid login or password.
1 is shown when the user is not existing and 2 is shown when the username exists but the password is incorrect.
The difference supplies hackers with relevant info on which accounts do exist and which not. I'm not sure if wowhead has security in place that makes it non relevant.
As it cant hurt much i would like to suggest to make the message the same. Both: Invalid login or password.
As the message is already covering both situations: bad login and bad password else the 2nd message would be Invalid password.
P
Post by
lianzhu
mmm the suggestion would be useless if the account name is used as the posters name. So i'd like to also suggest the ability to choose a charname from what you've uploaded. Comparable to the wow forums.
World of Warcraft accounts continue to be compromised, resulting in people losing items or even full characters. It's no surprise that some people who have lost accounts after downloading and using the Wowhead Client think that the client is the cause for the loss of their account.
it would reduce risks for players as some may use the same password between wow and wowhead. although it is not a wise choice people have this habit.
Post Reply
You are not logged in. Please
log in
to post a reply or
register
if you don't already have an account.