Hi
At the moment if you forgot your password, then you write your e-mail adress or Username, and YaBB send you a new passoword.. But I can do that for any registered user...
No one can hack.. but its not funny, if you got any day a new password, if some useres know that, and do that...
My Idea was.. You tell your Username or E-Mail Adress... and you get a e-mail with a new password... But.. there is a link in the e-mail... to activated the NEW password.. Before you dont klick this link.. your old password is still active...
Andreas
Author