http://l2citadel.com/hacked again, rotfl
who ever made their web panel is lamefuck who shouldn't be ever allowed to develop anything with public access.
1st (week 1), someone duped donate coins - panel did not validate if you had enough coins when sending them to other account.
2nd (week 2), someone moved GM character to other account - panel did not validate if you are owner of requested character.
3rd (now), you can change password of anyone account - panel do not validate when changing password if AccountName is yours, you was able to pass anything just by in-line html edit and submitting form.
HOW THE FUCK, you allowed to exploit SAME lame bug 3 times in row? wow, that's something you learn in first months of programing - never trust user input. Just amazing how one clueless retard can wipe whole fun for 2k ppl and months of preparing.