Forgot Password: what is the best method of implementing a forgot password function?

1. I personally would send an email with a link to a short term page that lets them set a new password. Make the page name some kind of UID.
2. If that does not appeal to you, then sending them a new password and forcing them to change it on first access would do as well.

Option 1 is far easier.