                send_reset_confirmation_request($name);
                $changed[] = $name;
            }

            $msg = 'password_reset_confirmation_request_sent';
            break;
    }

    if ($changed) {
        return author_list(gTxt($msg, array('{name}' => txpspecialchars(join(', ', $changed)))));
    }

    author_list($msg);
}
The product does not require that users should have strong passwords, which makes it easier for attackers to compromise user accounts.