2) If someone doesn't get his new password (say he doesn't check his E-mail for a month) couldn't he log on as a new user and make a new account?
If he wanted the same user name he'd need to have not logged on for a year, right?
@Wayne
How long after the change will accounts that have not been "reactivated", because they didn't request a new password, be deleted? When they are deleted, won't we have loads of "anonymous" posts?