function change_pass()
{
    global $txp_user;

    extract(psa(array('new_pass')));

    if (empty($new_pass)) {
        author_list(array(gTxt('password_required'), E_ERROR));

        return;
    }

    $rs = change_user_password($txp_user, $new_pass);

    if ($rs) {
        // Todo: Move full stop to Textpack.
        $message = gTxt('password_changed') . '.';
        author_list($message);
    }
}
The product does not require that users should have strong passwords, which makes it easier for attackers to compromise user accounts.