diff --git a/login/change_password.php b/login/change_password.php
index ccd5a9b9da7..7f36266e6f5 100644
--- a/login/change_password.php
+++ b/login/change_password.php
@@ -29,6 +29,7 @@
 
 			$USER = $user;
 			$USER->loggedin = true;
+            $USER->site = $CFG->wwwroot;   // for added security
             save_session("USER");
 
 			set_moodle_cookie($USER->username);