I want to avoid that user can change the password from the my profile option in the forum (I would do in my own control panel). And also to avoid they can change their email from the "Edit Profile" option.

How can I achieve this? Is there a setting to avoid this?

Many thanks

No one can change your password inless you give them your username and password. Always use a strong password that have leters big and small with numbers and a password thats not a word thats at lease 8 sysmbols long. If you created the SQL database the database is secured with your username and password that you log on to Windows with.