Define stricter username policy

Previously, you could log into an account named "MyAccount" by entering
either "myaccount" or "MYACCOUNT" (or any other case conbination).  This
patch requires logins to succeed with case-sensitive usernames.

I have also decided, that I wish to disallow duplicate usernames if the
only difference between them is case.  There can only be _ONE_
"myaccount" (of any case combination), even if he's known canonically as
"MyAccount".  This particular functionality is not changed by this
patch.  I'm just noting it as a deliberate decision not to change, by
policy.

Note that _passwords_ always have been, and still are, case-sensitive.
They are salted and hashed before they even hit the database.

Signed-off-by: Malf Furious <m@lfurio.us>

0 files changed, 0 insertions, 0 deletions