It was noted many times before in several threads and people have mentioned that it should be included in the new forum software. It didn't have it's dedicated thread then (well, now it does 
). I do agree; a lot of hacks happen due to said flaw as hackers once gained access to the account can simply change the email and password.
). I do agree; a lot of hacks happen due to said flaw as hackers once gained access to the account can simply change the email and password.Security aspects should be implemented immediately in this forum version. I feel waiting another year just for these much needed security upgrades would be too long.
Layout, avatars and performance can come at a later date. Security needs to come tomorrow.
Agreed; security is important, particularly so on a forum dedicated to cryptography. Though it's possible to recover accounts after their email has been changed, the process is cumbersome and time-consuming. I'm certain a plugin for email verification already exists for SMF, but it wouldn't be particularly hard to create one independently if necessary (generate a password reset key and store it in a database, send an email, invalidate unused keys after ~24 hours).