in register form set var_password and use default :POST(password); for both < password > and < var_password > it will save user password so then create a page forgot password then code user lister search form let user lister < search > be :REQUEST(account); < / search > when visitor forget password then search account to ask visitor is these your account? if click Yes btn then direct visitor to page were he will input email address of that specific search account and then login replace var(password) account login direct to change account.