[Parker Clack]

Justin:

Changing the script as written look in member.php for

$user = $DB_site->query_first("
SELECT email,userid,secret FROM user
WHERE secret='".addslashes($secret)."' AND userid = $bbuserinfo[userid]
");

and change to

$user = $DB_site->query_first("
SELECT email,userid,secret FROM user
WHERE secret='".addslashes(md5($secret))."' AND userid = $bbuserinfo[userid]
");

in register.php change

'".addslashes($secret)."',

change to

'".addslashes(md5($secret))."',

and admin/user.php

'".addslashes($secret)."',

change to

'".addslashes(md5($secret))."',

Look for

$pwinclude="";
if ($apassword!="") {
$pwdinclude=",password='".addslashes(md5($apasswor d))."'";
}

and below this add:

$secretinclude="";
if ($secret!="") {
$secretinclude=",secret='".addslashes(md5($secret) )."'";
}

then below this change

'".addslashes($secret)."',

to

$secretinclude,

and change

makeinputcode("Secret Word","secret",$user[secret],0);

to

makeinputcode("Secret Word<br>Leave blank unless you want to change it","secret");

Parker