Quote Originally Posted by Savvonet View Post
I tryed to add admin\user password check on header_php.php in includes/modules/pages/account_password, and it works fine, but with one bug:

If a customer (logged with normal mail and password) or an admin (logged with mail and master password) try to change account password, in old password field there is no longer a check, any word will be passed as "old password".
This may be the main reason the originator did not include master password in this manner.
As stated in my earlier post, I think the forgotten password is the better option. Even if I personally add someone to a site while talking on the phone, my last step is to use the forgotten password function to send them a new password.