How do I go about implementing a secure password reset function without sending the user an e-mail? There is another secure bit of information that I store and only the user should know, but it seems insecure to just let the user update a password just because they know a 9 digit number.How do I go about implementing a secure passwor
阅读背景：
安全密码重置而不发送电子邮件
来源：互联网
分享到：
