Hi
A recent penetration test identified a security flaw in our Moodle 2.7's self registration process which allows a potential hacker to discover whether a username or email is valid by using either in the new user sign up form and then getting the "This username already exists, choose another" or the "This email address is already registered. New password?" message.
Does anyone have a suggestion as to how to bypass this message and just display a "thank you for registering" message?
Thanks for any suggestions and comments.
Roger Mepham