Is it just me or is my computer really wierd

[w4tw4te5y5yhrjsrewye546#W%RW$5]

So i tried to do forget password and usually it would say email dosen't exist or something along the lines. So when i do forget password usually if its a real email it would go to the login page but nomatter what i type in it moves me there as if everything i type is a real email i could even type ajajaj
also i cannot create emails so I had gotten a friend to make me an account lel

[New]

https://www.mpgh.net/forum/showthread...708&p=11926298

rip :c Close @Joe nub

[Danny]

https://www.mpgh.net/forum/showthread...708&p=11926298

rip :c Close @Joe nub

Can you explain the reason behind it? Such as what Deca have performed

[New]

Can you explain the reason behind it? Such as what Deca have performed

When you visit the "Forgotten password link" with any email it will always say success.

Bruteforcing exploited the fact that, forgotpassword would only work if the email *existed*.

And then it would say *Email sent* so you know that it existed, otherwise it would say *Email does not exist*

Now it always says *Email sent* whether it exists or not. And this is what it should've been from the very start, but it wasn't so that's why bruteforcing was a thing.

[Danny]

When you visit the "Forgotten password link" with any email it will always say success.

Bruteforcing exploited the fact that, forgotpassword would only work if the email *existed*.

And then it would say *Email sent* so you know that it existed, otherwise it would say *Email does not exist*

Now it always says *Email sent* whether it exists or not. And this is what it should've been from the very start, but it wasn't so that's why bruteforcing was a thing.

Perfect, thanks for the explanation. Clever move

/closed solved