[pogo]

Another one.

In member.php the whole "start update password" routine isn't handled.

Find

// validate old password
  if ($currentpassword!=$bbuserinfo[password]) {

and replace it with

// validate old password
  if (md5($currentpassword)!=$bbuserinfo[password]) {

Then find

$DB_site->query("UPDATE user SET password='".addslashes($newpassword)."',usergroupid='$bbuserinfo[usergroupid]' WHERE userid='$bbuserinfo[userid]'");

and replace it with

$DB_site->query("UPDATE user SET password='".addslashes(md5($newpassword))."',usergroupid='$bbuserinfo[usergroupid]' WHERE userid='$bbuserinfo[userid]'");