Why does GetErrorMessage return “wrong password”, when the user name is wrong?

前端 未结 1 626
被撕碎了的回忆
被撕碎了的回忆 2021-01-19 07:26

GetErrorMessage (from CInternetException) gives me the following:

With the incorrect ftp server name:
\"ERROR! The server name or address could not be resolved\

1条回答
  •  傲寒
    傲寒 (楼主)
    2021-01-19 07:40

    Yes that is intended. A typical FTP server will not distinguish between an invalid password and an invalid username. This is for security reasons, so e.g. attackers can't brute force their way to discover valid usernames.

    0 讨论(0)
提交回复
热议问题