Send New Password

[computerskillz]

Shouldn't profile.php?mode=sendpassword contain just a little more criteria than just Username and Emailaddress?

Its not hard for others to get that information and then request new passwords for unsuspecting users who are hassled with being unable to logon, only to later find, after much hassle, a new password sitting an email inbox that they may not even check often.

--edit---

Shouldn't it contain another piece of criterium such as Security Question?