4 ms·
From my experience a user will almost always remember the password they've just entered, even if they got the email wrong. They should be able to login to a not
by citricsquid 13y ago
From my experience a user will almost always remember the password they've just entered, even if they got the email wrong. They should be able to login to a not-yet activated account and be presented with the option to correct the email for the activation email to be sent to. There's no potential for abuse there.