User shouldnt reset password to others acount

I use users emails as logins
If a user has forgotten hos password, he can reset it.
But: know another user he can reset the other users account.
How to avoid this?
Where do I untick the opportunity to reset passwords?

Best regards
Carsten Carjuth'

cajuth wrote: I use users emails as logins
If a user has forgotten hos password, he can reset it.
But: know another user he can reset the other users account.
How to avoid this?
Where do I untick the opportunity to reset passwords?

Best regards
Carsten Carjuth'

You can turn this off in CB Login module.

Nope.
You can set "lost password" to hide in the CB Login module. But..... If a user will use a wrong password, this option will be shown.

That gives people, who guess other peoples mail-adresses, an oppurtinity to reset each others password, hmmmm...............

Best regards
Carsten carjuth

Doesn't Joomla also do this.

Hi, I was thinking... about this problem too:
It's good, a user can click "forgot password", so I let it in the login.
But then, there can be some rare (I hope so) cases, somebody can disturb the use of a website, when he asks a new password, even when he is not the owner of the emailadress.
Shure, the right user gets am email with the new password, but it could be disturbing, always to have to change my password.

So I thought:
there should be a possibility, to login for some time with the new generated password or the old one. Only when logged in with the new password, then the new password is the actual, the old one can be deleted.

It's now one week and three days.
Is there no solution to resolve this?