3 ms·

I remember finding somewhere that let me sign up with a +, but not log in with it - unless I disabled client-side validation, at which point the server was happ

by philh 11y ago

I remember finding somewhere that let me sign up with a +, but not log in with it - unless I disabled client-side validation, at which point the server was happy to let me in.

arthurcolle 11y ago
That's insanely insecure. Can't believe client side validation would be used for a login system other than as a first check
- philh 11y ago
  I still needed the password (or so I assume). It was just a first check that was stricter than it should have been.
  - toxik 11y ago
    This is why backend and frontend need to share code!
  - Splines 11y ago
    I wouldn't be surprised if there were a significant number of bugs that have been fixed by deleting code.
hahainternet 11y ago
If you ever order from HobbyKing (not the store I mentioned previously) do NOT have a plus in your email. It gets converted silently to a space in their internal systems and their customer support has absolutely 0 access or escalation. They outsource everything, and ultimately it took me months to sort everything out.