Terrible Flaw of MKPC (that will probably lead to doxxing)

So there is a terrible flaw on MKPC. If you log out and press forgot password and click on i have my email on my account, it will ask you for your username, and when you put in your person, it will just give you their email.

This happened to me today and tendo now knows my email (although it is a fake) and he tried email bombing me (so know I know HIS email).

I am reporting this because I really don't want anyone to have to suffer from this.

I don't have email on mine (and I don't wanna)

I tried this with @Proudster's profile and it didn't give me the full email. How is this an issue if it's censored?

because when it happened to mine, it only did m**@blahblahblah.com so it was very obvious

i tried it with yours and tbf it might me my bad lol. Its still an issue

the issue it that it only shows the stuff after the '@ ', so if it's a school email it will be pretty easy to find it for example

Thanks for letting me know that! I've just removed mine because A - it's my school email, so it wouldn't even send me the thing and B - I know my password and don't think I'll ever forget it. Thank you @KeinieoMK and @Xero and the others.