fixes #2522 use privacy-preserving verification message

Replace the explicit "An email has been sent with a verification code" message with a privacy-preserving wording: "If your account exists, a verification code has been sent to your email address." This avoids account enumeration. Updated language entries in en_UK and fr_FR, the server-side message in password.php, and the password reset template.
This commit is contained in:
Linty
2026-02-12 17:25:50 +01:00
parent 74edc39995
commit b26ca3e08a
4 changed files with 4 additions and 4 deletions
+1 -1
View File
@@ -114,7 +114,7 @@
</div>
{elseif $action eq 'lost_code'}
<span class="success-message"><i class="gallery-icon-ok-circled"></i>{'An email has been sent with a verification code'|translate}</span>
<span class="success-message"><i class="gallery-icon-ok-circled"></i>{'If your account exists, a verification code has been sent to your email address.'|translate}</span>
<div class="column-flex">
<label for="user_code">{'Verification code'|@translate}</label>
<div class="row-flex input-container">