I've been browsing through lfs.net and my account details and i got an idea.
When you change your account details (name, adress AND passwords), you are not required to insert your old password for security reasons.
IMO this could be changed, i think it's not so difficult and for users it's just few seconds more, when they want to change something on their profile.
What do you think?

You have to log on in the firstplace to do any of the above, so it's rendered irrelevant.

Quote from S14 DRIFT :

You have to log on in the firstplace to do any of the above, so it's rendered irrelevant.

Yeah, but you don't know what could happen... And i think someone on this forum had this problem.
A lot of forums/webpages/game servers requires this and i think it's good security move.

I suggest asking old password only if you want to change WEB or GAME password.

Still, if your browser remembers your passwords, then you could stay logged in when not at the site, so someone else could use your PC and arrive at the site, and change your password that way. Pretty unlikely though.

That said, the most recent update to vBulletin forces me to re-enter my password (if I've not manually logged in recently) when performing moderator level actions, presumably so anyone who gets on my PC can only act like a regular user on here, and thus cause no permanent damage.

Quote from Bob Smith :

That said, the most recent update to vBulletin forces me to re-enter my password (if I've not manually logged in recently) when performing moderator level actions, presumably so anyone who gets on my PC can only act like a regular user on here, and thus cause no permanent damage.

Yah same here.