12.03.2018 - XenForo stores the users passwords in xf_user_authenticate , but without verify a users login request against the forum account information..