« first day (1992 days earlier)      last day (3251 days later) » 

Sisir
Sisir
17:43
Need feedback: Is there any possible security issue if I allow site users to login with both username and email?
Rarst
Rarst
doesn't that work by default?..
Sisir
Sisir
not sure. I think only username is default..
Rarst
Rarst
it's pretty common thing
ialocin
ialocin
unless it has changed lately it isn't default
Sisir
Sisir
nop, just checked. You can use only username
Rarst
Rarst
17:47
might have confused with dot com, they do both there
ialocin
ialocin
IIRC implementing it was pretty easy and I did it for a client, so I thought there is no security risk, but don't ask me for specifics, it was a while ago
Michael Ecklund
Michael Ecklund
18:13
I believe you can login with email for username in next update.
Howdy_McGee
Howdy_McGee
18:30
@Sisir WPCore Chat says coming in 4.5. So, not yet.
Whoops, that was supposed to go to Rarst
I can't think of any security issues though. Then again I'm not a security expert :S
Security through obscurity maybe but that's rubbish

« first day (1992 days earlier)      last day (3251 days later) »