The release information:

This is an important (security related) update, in previous versions hackers can guess common and repeating passwords from user. While the “forgotten password” function was based on the password and the user id, it could be possible to change the password for some user (if the hacker knows the users id and the right password). The risk is not very high for most installations but could be work out some trouble. The new version doesn’t use the password for validation anymore. The login name (encrypted) is used together with some “secret” secret string. AU class user can replace the class file but need to update the method calls in the activate password script. You need to add the constant variable SECRET_STRING to the db_config.php file.

Download the updated version from the PHP class here.

For further questions about the class post them to the official support forum.Similar Posts:

• Sending e-mails via SMTP with PHPmailer and Gmail
• Search for photos using PHP and the flickr API
• Tutorial: FTP Upload via cURL