Tokio Kikuchi found the bug and issued a patch. I updated the patch
to be a bit more thorough. Please try this out and see if it fixes
the problem without introducing any other bugs. I have a studio
session today so if there are no problems over the next 8 or so hours,
I'll issue a security pat
Barry,
+if not mlist.isMember(user):
+if mlist.private_roster:
+safeuser = _('undisclosed')
This is not a good idea because it will disclose the input email
address is not a member.
-def loginpage(mlist, doc, user, cgidata):
+def loginpage(ml
