Finding password exploit?

[Mentort]

Hi,

Some people are able to find passwords of my users on my hotels.
I don't understand how.
I have removed the forgot password exploit before you ask!
They say they cannot find my password because it is too complex.
Multiple people have come to me finding passwords, not just one.
one mentions md something..

[MentaL]

[asesinato]

If you're using Rev, there is a passport exploit, you will need to remove the forgot password function from your class.users if that is the case.

[Mentort]

It isn't that exploit.

[Konquer]

Maybe they have access to your server. All the passwords are stored with md5 hash, so when they say some passwords are too complex to crack they probably couldn't resolve the md5 hash back to the original password through md5 decrypters and dictrionaries.

[discodutch]

i have similar prob nd still need help

- - - Updated - - -

If you're using Rev, there is a passport exploit, you will need to remove the forgot password function from your class.users if that is the case.

passport exploit is tht new