For forgot password, there really is no reason to take this approach, though if you do it sanely it's not a problem. The report generation and other things lik

For forgot password, there really is no reason to take this approach, though if you do it sanely it's not a problem. The report generation and other things like that in their code, however, are reasonable to do this way if you do it right.