I think we still have a disconnect. They aren't selecting a secret question. The secret question was already selected when they set up their profile. I need them to answer the secret question based on the secret question that they chose when they set up their profile.
My question is how can I do it in a single form when I need their email address to retrieve their secret question so they can answer it and continue? They can select a different secret question when they log in and choose to change their profile and save it. The whole purpose of the secret question/answer is to validate them as the owner of the account before sending them a new password. I don't want them to take a guess which secret question they may have chosen before when setting up their profile since there are 10 of them and they might not remember which one they chose.
If you are saying that it can't be done on a single page as described in the previous paragraph, then OK. I think what's throwing me is you saying that they would select the chosen question on the one-page form. That's where the disconnect may be. I don't want them to choose their secret question since they may not remember which one they selected when they set up their profile.
If you look at the way Paypal does it, one of the options to reset your password is to answer a security question. They actually use two secret questions that must be answered successfully. You don't pick the security question and then answer it, they simply display the two security questions you selected when you set up the account, and you supply your two answers which they compare to the info they have. If your answer is correct, they send you to a change password page. This is exactly what I'm after.
Is this what's causing the confusion (at least on my part)?
steve
