This tool is designed to let you change password based on domain, username or password .

这个工具的目的是让你更改密码为基础的网域，使用者名称或密码。

As a countermeasure, make change-password forms safe against CSRF , of course. And require the user to enter the old password when changing it .

对策是，让修改密码的表单不能被CRSF攻击，当然在改变密码的时候，也需要用户去输入旧密码。