when you have registered, but not clicked on the e-mail. It should not just tell the user the username and password is invalid. It should tell them that they still have to click on the link in their e-mail. .John
But that's not the only reason. They could have entered an incorrect password or username too. We just gave a general error statement. You entered a username and password that was invalid. We already told you after you register to check your email to continue your registration.
i think it should tell them because some dumb people might be like, hey i signed up, why doesn't my username and password work. and leave the site. just a suggestion. .John
Aside from that, you could do a check if the username exists and then depending on that display a different message than the "username or password was invalid" one.