[quote=eehjhay]How about changing the email address can only be made if you put the current password too? Because with the current structure, if someone left their account logged in, then somebody else use that account, they can just change the email address, then use the Forgot Password function, then change the password. You know that moderators can change other members email, right? Honestly we can hack their account and they can not access their account anymore without the Ban function. Haha. Though i wont do that. But if others might have problems with other members, they can block them out. Lol. But im not so sure with this. I havent tried it.[/quote] I'll consider to implement this idea later on. For now, if something like that happens I'll only remove him/her from the moderator team, just like what I did to one moderator today. He changed the email of some old members (including a couple of ex-moderators) and breaking in into their accounts by using "forgot password" function. Password change is irreversible so those members won't be able to login with their original password anymore should they ever come back. Even though those members are not active anymore, I see it as serious privacy violation (and an abuse of moderation power). Normally I don't bother checking the forum logs, but if there's problem like this I'll dig the logs to show me who did what.