Visit the website to change the password of any account

Register, log in, retrieve the password, enter the new password, cut off the http post data, change userid to the userid of another account, f12 can directly see the userid on the website page
After the modification is submitted successfully, the passwords of other accounts are modified in batches, which may cause great harm. You can change the passwords of other accounts to log in directly by checking the userid of another user name.
 Solution:It is best to set a random token for each account to change the password and retrieve the password email once. This time, many websites are experiencing password problems.