A impatient client of mine recently attempted to reset his password. He tried 6 submissions within a 2 minute time frame.

My first question: Are there any type of anti-spam techniques built into the email system of Kentico. 3 of the emails were sent out but there were still 3 sitting in the queue. I seen Kentico had Flood Control, but from what I could tell this is only used within the Kentico site for messages, and forum posts. I had checked this and the feature was turned off.

My next question: It seems like the password reset piece is bugged. I attempted to reset my password in a similar "impatient" fashion as my client. I had some emails sitting in the queue and some actually sent out. When I clicked the link of the first few emails, they were marked as expired, but when I clicked the link on the last email I could reset my password. Also, I went back to the first emails that were expired and the link allowed me to reset my password. Is this desired functionality or is this to be understood as this should never happen in a normal scenario.