jascha

I would suggest using SSL where passwords are involved as well as .htaccess and other means of security. A read of Securing Mambo OS mightbe of some help from MOS Forge. You may wantto also insurethe server itself was not compromised since many times a mailcious user can escalate privilages once in a system. . .

-Jascha

__________________
Mambo Security: http://mambosec.localareasecurity.com