by joshli » Wed Feb 17, 2010 10:54 pm
This is how the reset password system goes:
First, the user submits a request to the forgot_password form.
Then, an email is sent to the user with a link to reset the password.
Then, a form is sent to the user where they can reset the password.
Note that there is no way to retrieve a password because it is encrypted through a one-way hashing system called sha1 therefore a password can not be decrypted and can only be overwritten by a new one.