[geeklog-devel] Lost password

[Simon Lord]

How do we address an ass that wants to be a pain and sits patiently 
entering usernames into the lost password form requesting new passwords 
for as many users as they can?

Can we do something to slow these people down?  Provide a second field 
where the user has to enter a second bit of information to compare both 
parts to the db for authentication?

Sincerely,
Simon