user_password will have been updated if u_chgpasswd is yes and new password has been set, no need to check password against old hash again. PHPBB3-17127