Yes, but on line 1369:
Code
if ($user['USER_TEMPORARY_PASSWORD']) {
                        if (md5($Password) == $user['USER_TEMPORARY_PASSWORD']) {
                                $bad = "no";
                                $query = "
                                        update  {$config['TABLE_PREFIX']}USERS
                                        set     USER_PASSWORD = ?
                                        where   USER_ID = ?
                                ";
So USER_PASSWORD is set to USER_TEMPORARY_PASSWORD before $autolog is set.


The Stovebolt Geek
https://www.stovebolt.com/ubbthreads/ubbthreads.php

Server Information
UBB.threads Version 7.7.5
Release 20201027
Server OS Linux
Server Load 0.16
Web Server Apache/2.4.6
PHP Version 7.4.33
MYSQL Version 5.7.43
Database Size 1.85 GB