xf 2.2.9
User 1 was banned 6 months ago.
User 2, which come to find out is a second account for user 1, edited the password for user 1. What went wrong and how to correct this so it does not happen again?
Weird. I thought only an admin could edit another user's password. Interested to see what the resolution on this is. I am assuming coldcases is the one you think is a sock for the banned user?
There was a password reset email sent for the banned account. When you set a new password while logged in with another account, that other account shows up in the change log.
Logout or open an incognito window and go to /lost-password/
Enter the email address of account1
Login as account2
Visit the password reset link, that you got for account1
Change the password
Result: In the change log for account1 (the banned one) you will see account2 (the one you changed the password with) - exactly what happened on your forum.