I ran into a very stupid case yesterday. My friend called me and asked me to help her with her website, she got trouble and could not login to admin panel. And I did some diagnosis test, nothing wrong, DB' was up and running, no problem, no login exception, her site is written in ASP.NET and everything is alive and well. Just right after that she told me that she forgot the password :-<
If you lost your password, what would you do ? Go to reset password feature. Guess what ? There's no reset password page 8-} . Actually, I remembered that not many developers implement this feature, especially for administration page, and also the author of the website. I will remember this for the next project.