iJoomla Forgot Password Hackhot!

This modification to Joomla affects the way the "forgot password" feature works. Currently, if a user forgets their password for a site Joomla requires the user to enter both their username and email in order to retrieve the password. With our modification to Joomla, users will only be asked to enter the email address they used when they created their account, and their password will be sent to them at that email address.
We know that some people have a hard time remembering both their username and email, because many people have dozens of different logins for all the various sites they use. We also think it's fairly safe to only ask for their email address because the password can only be sent to that user’s that email address. If you don't think this method is as safe as the normal way Joomla works, please don't use this hack.