When you use the "forgotten password" feature, a new password is supposed to be generated and emailed to the user. The user then clicks on a link in the email to confirm the new password.
However, when the "Protect Whole Forum" feature is enabled ($protectWholeForum = 1 in setup_options.php), the user is taken to the whole forum password page. When the forum password is entered, the confirmation page does not show and apparently the new password is not registered. Thus the user is still unable to log in.
Any ideas for some workarounds?