Forgot_password abuse

Let’s make sure the site is updated, latest should reduce the volume, we will soon add up address to the email so site admins can easily block abusers

5 Me gusta

Please do. I have situation where most users get reset links several times a week.

1 me gusta

A potential solution if a community is likely to get abuse and users are likely to know what their email address is, would be to require an email address rather than username to request a password reset.

2 Me gusta

hmmm @puchal did you enable hide email address taken site setting? It will require a full email for a forgot password email to be issued.

3 Me gusta