Quote:
Originally Posted by kh99
Here's a thread where someone posted a script to change all passwords for a usergroup to the usernames: www.vbulletin.org/forum/showthread.php?t=243919 then I believe they will be required to change because a password the same as the name isn't allowed.
I think another possibility (which lets users log in one more time with their current password) would be to set a password expiration date for the usergroup, then do a query to set the password date to some time in the past. But that will tell users that they "haven't changed their password for X days" which could be confusing.
|
And it defeats the object, as the database was leaked, malicious people will just login to the accounts, and change the passwords