Check that the items in the following list have already been done.

See the comment in #101 for the remaining changes needed.

To look up a member by name, please provide their username in the box below.

How about if it says "Further instructions have been sent to [email protected]" in both cases (the email does exist and the email does not exist). I had the same problem with a module i was working on to resend a user's name via e-email via a similiar way pass reset works.

Diamonds is a “freemium” dating site you can use either with or without paying.

So, an anonymous user can easily check whether there is a user registered with a certain e-mail-address or not. Think of the following scenario: Alice wants to check if her fiancé Bob is registered at "adult-dating.example.com", a well known Internet dating site run by Drupal. If she gets the message "Further instructions have been sent to your e-mail address.", she'll know that there is a user registered with Bobs mail address (= Bob himself) or with a username matching his mail address (unlikely that it would be someone else).

Possible solution: never print "Sorry, XYZ is not recognized as a user name or an e-mail address.",always print "Further instructions have been sent to your e-mail address.".