IMPORTANT-Security issue

I think that Simviation needs a more secure "Change password" form. At the moment, you can change the password, whenever you are logged in, even if you don't know the old one. Say someone logged on in an internet cafe, and then went to the toilet. While they were gone, a hacker coluld have changed their password and e-mail. I think you should have to put in the old password to change the password or e-mail address. :(


