表单Auth-pwd恢复 - 我宁愿用户在网络上重置它而不发送电子邮件

Question 1 - I'm wanting to give the user the ability to reset their password only without an email and generated password. The user verifies themselves against our internal database by a custom form a wrote. Then, I'd like to prompt them for username and security q&a. I don't know how to do the security QA so i decided to customize the password recovery control. I don't want it to send an email with a new password. Rather, if they get the username and question right, i want to send them to a password reset page.Question 1 - I'm wanting to give the user the a