View Single Post
Old 02-10-2010, 07:02 AM  
TheDoc
Too lazy to set a custom title
 
TheDoc's Avatar
 
Industry Role:
Join Date: Jul 2001
Location: Currently Incognito
Posts: 13,827
Quote:
Originally Posted by harvey View Post
why don't you use AJAX to check for availability and avoid confusions? You'd even allow fields filling only after the username is successfully confirmed as a valid one. Just a suggestion
NATS locks the usernames for a very smart reason... if you use ajax, I can test the username's for a valid user, once it's a good user I can brute force attack that username.

With nats, every submit to check for a valid username, locks the username - along with a generalized error on a duplicate.


This is done for a very good reason, if you screw with it, you're chopping your own balls off.
__________________
~TheDoc - ICQ7765825
It's all disambiguation

Last edited by TheDoc; 02-10-2010 at 07:03 AM..
TheDoc is offline   Share thread on Digg Share thread on Twitter Share thread on Reddit Share thread on Facebook Reply With Quote