Most of the members of my site who do forget their password also forget their user name. Is there any logical reason why the username is required on the pop_pword.asp? I would think the email address would be plenty.
If the email address resides in the members table, why not just shoot the message to that address? Why require the user name? How do I go about removing the requirement for user name?