From ba70cf04a71cf164ead6b04e41e66ccc1614e00f Mon Sep 17 00:00:00 2001
From: Hector Cortez <hector@colosa.com>
Date: Mon, 4 Mar 2013 11:32:49 -0400
Subject: [PATCH] BUG 10925 When login with wrong credentials error should be
 generic. SOLVED

- When login with wrong credentials currently the error message is specific to what the login error is ("WARNING: User not registered!" for wrong User name and "WARNING: Wrong password" for wrong password).
- Changed Message Wrong login to generic.
---
 workflow/engine/methods/login/authentication.php | 7 +++----
 1 file changed, 3 insertions(+), 4 deletions(-)

diff --git a/workflow/engine/methods/login/authentication.php b/workflow/engine/methods/login/authentication.php
index 3be76821d..ca5fdd3fb 100755
--- a/workflow/engine/methods/login/authentication.php
+++ b/workflow/engine/methods/login/authentication.php
@@ -46,12 +46,11 @@ try {
         switch ($uid) {
             //The user does doesn't exist
             case -1:
-                $errLabel = 'ID_USER_NOT_REGISTERED';
+                $errLabel = 'WRONG_LOGIN_CREDENTIALS';
                 break;
             //The password is incorrect
             case -2:
-                $errLabel = 'ID_WRONG_PASS';
-
+                $errLabel = 'WRONG_LOGIN_CREDENTIALS';
                 if (isset($_SESSION['__AUTH_ERROR__'])) {
                     G::SendMessageText($_SESSION['__AUTH_ERROR__'], "warning");
                     unset($_SESSION['__AUTH_ERROR__']);
@@ -87,7 +86,7 @@ try {
         //to avoid empty string in user field.  This will avoid a weird message "this row doesn't exist"
         if ( !isset($uid) ) {
             $uid = -1;
-            $errLabel = 'ID_USER_NOT_REGISTERED';
+            $errLabel = 'WRONG_LOGIN_CREDENTIALS';
         }
 
         if (!isset($uid) || $uid < 0) {