The forgot password form says it emailed your password even if you mis-typed your email address. I propose showing an error instead if no user can be found with that email address.
A patch is attached.
patch to SiteApp->validate_forgot()
Log in to post a comment.
patch to SiteApp->validate_forgot()