Customer "forgotten password" in 1.5.5.1

Hi all,

I install opencart 1.5.5.1 and customize the default theme for my new store!and change some core files! so plz not advice to upgrade!

I used the customer "forgotten password" feature for the first time and i find out that opencart without any verifying reset the password and send new password to customer's email.
opencart how know that new password requester is the customer?
why opencart not use password reset link for reseting?

do you know any solutions to fix that and use reset link instead of new password without verification?

Thank you

Very good point, I would like to know if their is a way around this as well.