Password Reminder need increase

[jozeph]

Our customers are complaining that someone is changing their password from client area, just because someone type the correct email address and request a remind.

 

I think that the correct way to perform this action is:

 

1- receive password reminder request;

2- generate a temporary link and send to user email;

3- user click on temporary link;

4- system will generate a new password and send to email address;

 

I don't know if we can done this using actionhooks, but I will try.