Security issue

[resilien7]

I just noticed another problem with the forum--the login form sends the login credentials in plain-text. This is very insecure, as anyone on the same network would be able to see the user's password using a packet sniffer. You should always use secure http (https) to send passwords and other sensitive data.

Even though this is a forum, a lot of people unfortunately use the same password (and sometimes even username) for all of their online accounts. That could include email, web hosting, and even banking. So I really recommend you change this as soon as possible, or at least warn your users that the forum login isn't secure and that they shouldn't use the same password for it as they do for their other online accounts.