Hot answers tagged password
Your site is hacked. There's some security breach on your web. There are a lot of thing that you can do, but first things that you should do: You should get the backup up (both web and database) and then fix / upgrade everything and change passwords. Scan the site for suspicious code, and remove unresponsive / unnecessary plugins or modules.
You can force a password change by running UPDATE user SET user_password_expires = '19990101000000'; (This is not the same as a password reset as it will accept the old password one time. Less secure, more forgiving.) If you cannot be bothered to look up the DB password, you can just use maintenance/sql.php.
Can you perform a query? UPDATE the_table SET password='UserNeedsToResetPassword'; Now all users' passwords dont work anymore. I choose plain text, because I cant think of a way that sha1($_POST['pass']) results in this ;) (or whatever hash you use)
Only top voted, non community-wiki answers of a minimum length are eligible