JUST A PSA
Apparently Mapcore uses cloudflare, meaning it was subject to the Cloudbleed leak, meaning there is a chance people's passwords have been leaked.
Thrik can you confirm or deny whether this has affected the site?
EDIT: If you're unsure whether you have been compromised on other sites, you can use this site to check whether it uses cloudflare: http://www.doesitusecloudflare.com/