https://security.stackexchange.com/questions/41247/changing-...
That is so bad it almost has to be a deliberate method to extract passwords.
https://security.stackexchange.com/questions/41247/changing-...