> with the challenge question system, _you_ have both > the question and answer, so you could just use the form > yourself to look at all the users' passwords. not if the passwords are encrypted ;o)