+2

User password change to require old password

k0xak il y a 1 an 0

When user attempts to change his password he is not being required to type his old password.

This is serious security issue.

Password reset from should require old one.