So the PasswordRecovery control calls the getpassword method in the Membership Provider and it returns the password. But there is no property on the control for getting this password back. I am trying to construct my own email message in the OnSentingMail. How can I get the password?
The other question I have is how are locked out users handled? Right now I have a message that is displayed when they try to login or get there password that they are temporarlly ban and to contact the admin. I could see this being a problem if there are alot of people locked out. So what is the standard for locked out users like if they entered their password to many times? Should I have them locked out for a period of time and display something like you have exceeded the max login attempts try back later? What about if they exceed the max password recovery? Should they then have to contact the web admin?
Thanks!
...
Go to the complete details ...