Help on password reset from customers

[ccw0103]

Hi guys,

 

something weird happened, one of my customer has complain that he received an password template email sent to him without requesting the "password_query"

 

in my email logs, I can see there is no attempt of him reseting the password but somehow there is email template "password" being sent to him....

 

is there any reason behind this??

 

[El Patron]

this could be simple spam/fishing email?  did he send you email he received and does  it match what you shop would send.

 

There are no time initiated functions in PS or other native process that would send email reset will nilly.  Note: it's  possible for anyone to use 'any' email address to request pwd reset using 'any' email address.  So consider 'I'm a human' widget at pwd reset.