Because automatic email is disabled, the reset link is generated securely and written to the backend log for manual retrieval in XAMPP or phpMyAdmin.