How can I securely check if a username is already taken?
- by Geo
I have a form where someone can create a new user. I'd like to add some AJAX to check if a username is taken, as soon as the input field loses focus.
I'm not really sure how to go about this, as this could pave the way to bruteforce attack, since you could check for any username and see whether or not it exists.
Any suggestions?