If I use mod "Forgot your Password?" of CB, password changes immediately, and I receive the new password on my e-mail, but in standard mod in Joomla I receive a verification code first, which I should enter to change my password. If malefactor knows e-mail of any user, he can change their passwords. How to do that in CB password should not be changed at once, but it can be changed after entering the verification code, which is sent on e-mail, but if user didn't enter this code, password not change?
Thank you.