1. Front Desk request background jump retrieve password page
2. Create a captchaid in the background, hide in the Retrieve Password page, and jump to the retrieve password page
3. in the Recover Password page, enter the user name, email, verification code, submit to the backstage
4. background Check Verification code, user name, mailbox, generate a Safekey (value,expire) coexist into the database, send back password mail
Mail link style:
"Http://baidu.com/resetpswd.html?username=liam&key=sdfalkjxzcvnuiasd8923jkdfs78jjk3"
5. Front desk Request Reset Password
6. background generate Captchaid, according to username get member, and put Captchaid, member, key hidden in Reset Password page, and jump to reset Password page
7. in the Reset Password page, enter a new password and verification code, submit to the background
8. The background checks the verification code, verifies the new password whether meets the request, in the comparison to the page Safekey and the database Safekey is consistent,
If there is no exception, reset the password. Resetting the value of Safekey (Value,expire) in the library
Web System Recovery Password process