the matter is the person use the same password in all websites...
---------------
here is the stupid way:
i hacked a website and i found the password and the email in the database
i tried them in email and i log in ...:s
-----------------
:S
and you know what after that...
>godaddy>forget password > retrieve password > reset password...
