quote:
Originally posted by matty
Its a crappy system and sends emails to all accounts registered under that email.
Because it doesn't know which account you forgot the password for.
If the form only asked for a username, someone could send me a password reset email without even knowing the address I registered with, which is kinda dodgy. And if it came up with a list of usernames associated with an email address, that would be a privacy issue because there's currently no other way to search for members by email address.
/ 
