in register form set var_password and use default :*POST(password); for both < password > and < var_password > it will save user password so then create a page forgot password then code user lister search form let user lister < search > be :*REQUEST(account); < / search > when visitor forget password then search account to ask visitor is these your account? if click Yes btn then direct visitor to page were he will enter the answer to the security question of that particular search account and then login replace var(password) account login direct to change account.
1, user registration