I am just amazed, provided I am reading this right, that anyone can simply with a bit of code overwrite any user password on the site. you would think there wo

I am just amazed, provided I am reading this right, that anyone can simply with a bit of code overwrite any user password on the site. you would think there would different levels of user accounts and perhaps two level authentication for any change regardless of how it is invoked