Password change confirm
Dave Reid - September 8, 2009 - 15:09
This is a Drupal 6 backport of #86299: Add "current password" field to "change password form" that forces you to enter your current password when changing your password in the user edit form. This helps prevent possible XSS attacks such as http://lampsecurity.org/drupal-xss-password-reset.
