Security questions on password reset.

I would like to disable the need to answer the security question when resetting a password. Unfortunately this is never going to work properly unless the answer is a single, lower case word. In nearly all cases, the customer cannot remember exactly what they typed in and in what case. It's not meant to be a password, but WHMCS have implemented it exactly as if it were!

The secret question option is very good for manual / verbal verification - we can ask the customer over the phone, or on live chat for the answer to their question in order to verify their details - so I'd like to keep this running, but it's completely useless when used with the password reset option.

Asking someone to remember an exact sentence as if it were a password and to type that in exactly how it was originally typed, in the exact case? Completely stupid! Punctuation, capitalisation, extra spaces, different words used, plural or singular - all things that can be very easily forgotten, missed etc. To be brutally honest, this is so badly thought out it's an embarrassment for WHMCS. It should either be restricted to a single word, lower case answer - or disabled completely!

Do you know if it is possible to disable the security question, just for the password reset? is it a case of simply editing the template? If not, I guess it would be easy enough to simply disable the security question option completely and then add a custom field for this instead.

I've looked around but I can't find any instructions for cleaning this out completely - i.e disable the security questions and purge the questions and associated client answers from the database. Does anyone know the database fields names without me having to go digging?

Thanks in advance.