Password Reset With No Email Address

[NTLDR]

If a you visit member.php to get the form to reset your password and you submit without entering an email address it tries to email all the users without email addresses. IMO it shouldn't try and send out emails to a blank address as its clearly not going to work.

This is more of an anoyance than anything else as I seem to get about 20 of these in a batch every few days as someone has hit the button without entering an address.

[Chris M]

Ditto - I keep wondering where they come from

Satan

[NTLDR]

This is also the case for emailing a member via the Email form if the user has it enabled and theres no email address as well as Thread Subscriptions and PM notifications.

[Scott MacVicar]

open functions.php below

$toemail = trim($toemail); 

add

if ($toemail == "") {
    return false;
  }