When I clicked on Settings link and entered incorrect current password and correct new password, after clicking on Save button I expected to get a some splash message about incorrect password but actualy I got a fatal error page with message "We could not log you in. Please check your username and password. "
Is this a right behavior? Because I think it is not.
info@elgg.org
Security issues should be reported to security@elgg.org!
©2014 the Elgg Foundation
Elgg is a registered trademark of Thematic Networks.
Cover image by RaĆ¼l Utrera is used under Creative Commons license.
Icons by Flaticon and FontAwesome.