...or send it to the same address, i've changed the pass
Definitely do
not reuse that address. Even if you have changed the password, the key is public so it is not safe, the password will not help.
Yes , he should change the address because the other private key is compromised forever. I think this kind of people must learn more about bitcoin before start own it.