Closed (won't fix)
Project:
Drupal core
Version:
7.x-dev
Component:
user system
Priority:
Normal
Category:
Feature request
Assigned:
Unassigned
Reporter:
Created:
5 Aug 2008 at 11:16 UTC
Updated:
16 Sep 2008 at 18:53 UTC
Jump to comment: Most recent file
Comments
Comment #1
stokito commentedI am also make patch for Drupal 5.9 (see attachments of this comment)
Notice! In the password request page user email will not be autocompleted for security reasons.
Comment #2
pasqualleComment #6
dave reidThis should really not have any part of core, but rather a contrib module if you really need this functionality. This would an easy way for people to get a list of all the users on your site. See Dries' comment at http://drupal.org/node/284887#comment-987561:
"The problem with this patch is that it now becomes possible for anonymous users to retrieve a list of all user names in the system. Imagine you have a porn site, and people use their real name as their user name ... Imagine the same for a client side, an e-commerce website, etc. This is an information leak that seems highly unwanted ..."
Comment #7
pasquallethat was my first concern, but Drupal has permission for that, so it can be checked easily..
Comment #8
damien tournoud commentedThis would be great as a contrib module. But I'm really against that in core.
Comment #9
dave reidAs was requested, this is now a contributed module: Autocomplete username.