Everybody can change Admin password

I have a problem  ( i think everybody )

=======================================

I am  Administrator  and  i  add my friend in admin group

he can`t see   " change administrator`s password " option  in  Admin page but  he can change my password  from  Members List page

by clicking on    "edit user  profile"    button

yes he is a member of Admin group but he can  change  "Administrator`s" password !!!!!??????

is this security????????!!!!!!!!!!!!!!!!

what you think  about this?

this not good for  my forum  and site

if anybody can  solve this problem please tell me

============================================

Thanks

If you cant trust the other admin from not changing your password then i dont see why you have him set as one.

I think this has been talked about a few times. Cant remember what -boRg- said about it though.

i dont agree about this piont if im an administrator and i have forget my password im gonna change it with opening my Db and change it manually by changeting the Password faild to a new password

The administrator have to control everybody and no one control of him.

Badaboem wrote: msm_eg wrote:  if im an administrator and i have forget my password im gonna change it with opening my Db and change it manually by changeting the Password faild to a new password Bit hard if the passwords are encrypted. This will only be possible with old versions of wwf.

Not necessary.

Suppose you want to do it.

install wwf on your pc. create a user account. this time DO NOT forget your password. open the database. look for the username and see the password and salt value of it. copy it and replace it

it will help

btw i myself dont agree with the pont. admins should not be able to change other admins password

only master id should be able to

also any admin shouldnt be able to change pass of master id

borg, please look in this