password recovery

[xcoderx]

friends i the script http://www.phpeasystep.com/workshopview.php?id=21 is working but its sending password like this

 

Your password for login to our website

Your password is 34igkgk45igoljk5ikl45lkgjkbt3fvkuj

more message...

 

how to fix it? ???

[Masna]

Are you md5 encrypting the passwords? If you are, you can't provide a password recovery feature: md5 is a one-way encryption.

[MadTechie]

your need to change the password, then send them the new one.. thats the whole point of ONE WAY encryption

[xcoderx]

is there anywhere i can that script?  like the one worked above

[MasterACE14]

maybe if you pay someone they'll do it for you.

[xcoderx]

ok my register is like this $pass = md5($pass); how to not make it md5? could atleast someone help in this?

[Masna]

ok my register is like this $pass = md5($pass); how to not make it md5? could atleast someone help in this?

 

I'm starting to believe you're trolling this board...

 

Remove that line altogether, and md5 encryption will stop.

 

Edit: Actually, I'm now positive this is some seriously hardcore trolling. I'm about to potentially violate TOS Rule #14: Can someone lock this? Daniel0 perhaps?

[MasterACE14]

you leave registering how it is with the md5();

 

you make a separate file which changes the users password to something else, updates it in the database, and e-mails it to them.

$newpass = "hello";
mail(); // mail it to them
$newpass = md5($newpass);
mysql_query() // update pass in database to new one 

[xcoderx]

lol removing the md5 line only gives error

[Masna]

lol removing the md5 line only gives error

 

The sad thing is that you're actually considered an enthusiast...

[xcoderx]

eish i guess i better drop the ideo, thanks alot to u all for ur help and time

[MasterACE14]

The sad thing is that you're actually considered an enthusiast...

 

way over his head lol

[MadTechie]

If you wish to remove the MD5 (NOT recommened) then your need to remove it from ALL points where its used

ie Signup & Login

but your also need to reset ALL current passwords

 

MasterACE14 code

you leave registering how it is with the md5();

 

you make a separate file which changes the users password to something else, updates it in the database, and e-mails it to them.

$newpass = "hello";
mail(); // mail it to them
$newpass = md5($newpass);
mysql_query() // update pass in database to new one 

 

is valid and will work

 

here a slightly more complete code (untested)

<?php
$user = "Bob";
$newpass = "hello";

$Q = sprintf("SELECT ID,email FROM members WHERE name='%s' LIMIT 1", mysql_real_escape_string($user));
$result= mysql_query($Q) or die($Q.mysql_error());
$row = mysql_fetch_array($result);
mail($row['email'], 'password change', "Your new password ".$newpass); // mail it to them
$newpass = md5($newpass);
$Q = sprintf("UPDATE members SET password='%s' WHERE = id = %d",$newpass,$row['id']);
mysql_query($Q) or die($Q.mysql_error()); // update pass in database to new one 
?>