Yes, but on line 1369:
Code
if ($user['USER_TEMPORARY_PASSWORD']) {
                        if (md5($Password) == $user['USER_TEMPORARY_PASSWORD']) {
                                $bad = "no";
                                $query = "
                                        update  {$config['TABLE_PREFIX']}USERS
                                        set     USER_PASSWORD = ?
                                        where   USER_ID = ?
                                ";
So USER_PASSWORD is set to USER_TEMPORARY_PASSWORD before $autolog is set.


The Stovebolt Geek
https://www.stovebolt.com/ubbthreads/ubbthreads.php

Server Information
UBB.threads Version 8.0.0
Release 20240826
Server OS Linux
Server Load 0.11
Web Server Apache/2.4.37
PHP Version 8.3.11
MYSQL Version 8.0.39
Database Size 1.82 GB