In trying to prevent username enumeration, I'm editing login messages to obfuscate whether the username or password was incorrect. I've successfully edited the messages for when the password is wrong, but I cannot track down where the "Invalid username" message pictured below is stored.
I've edited myaccount_lang.php
, but it's had no effect on this output. I've searched for "Invalid username" on my /system/
folder, and updated the message anywhere I've seen it, but to no success. (The only other file I found it in was moblog_lang.php
, just to be clear.)
What am I missing?