I would like to see a hack made in which the administrator is informed whenever a member resets his password by way of email. I am concerned that someone would get their email "hijacked", such as is easily done with the use of a Hotmail account that has not been used for a while and is returned to the public domain. Then someone could use the same email account and take over the user's account. Imagine if it is the account of an administrator or moderator, and you would have troubles.
|