If you're an admin on the docs and you hit hit change username without putting anything in the field, you are permanently locked out of your account. I would assume the same thing happens with the password field. You should check if the input is valid, and ask the user if they're sure they want to change their username/password.
I've gotta say I'm pretty alarmed that a bug like this even exists; you should always assume all user input is malformed or malicious until proven otherwise.
[doublepost=1488381723,1488341157][/doublepost]@Wrong
I've gotta say I'm pretty alarmed that a bug like this even exists; you should always assume all user input is malformed or malicious until proven otherwise.
[doublepost=1488381723,1488341157][/doublepost]@Wrong