Sending email for forgotten password

[kennedysee]

The program works with sending via email with the real password that exists in database...

 

Can anyone help me with sending a random password to the email instead of showing the real password out?

 

Thanks...

 

forgot_password.php

<table width="380" border="0" cellpadding="3" cellspacing="1" >

<tr>

<td width="33%"><strong>Enter your email : </strong></td>

<td width="67%"><form name="form1" method="post" action="send_password_ac.php">

<input name="email_to" type="text" id="mail_to" size="25">

<input type="submit" name="Submit" value="Submit">

</form>

</td>

</tr>

</table>

 

 

send_password_ac.php

<?php

 

$host="localhost"; // Host name

$username="root"; // Mysql username

//$password=""; // Mysql password

$db_name="registration"; // Database name

 

 

//Connect to server and select databse.

mysql_connect("$host", "$username")or die("cannot connect to server");

mysql_select_db("$db_name")or die("cannot select DB");

 

// value sent from form

$email_to=$_POST['email_to'];

 

// table name

$tbl_name=user;

 

// retrieve password from table where e-mail = $email_to([email protected])

$sql="SELECT password FROM $tbl_name WHERE email='$email_to'";

$result=mysql_query($sql);

 

// if found this e-mail address, row must be 1 row

// keep value in variable name "$count"

$count=mysql_num_rows($result);

 

// compare if $count =1 row

if($count==1){

 

$rows=mysql_fetch_array($result);

 

// keep password in $your_password

$your_password=$rows['password'];

 

// ---------------- SEND MAIL FORM ----------------

 

// send e-mail to ...

$to=$email_to;

 

// Your subject

$subject="Your password here";

 

// From

$header="from: your name <your email>";

 

// Your message

$messages= "Your password for login to our website \r\n";

$messages.="Your password is $your_password \r\n";

$messages.="more message... \r\n";

 

// send email

$sentmail = mail($to,$subject,$messages,$header);

 

}

 

// else if $count not equal 1

else {

echo "Not found your email in our database";

}

 

// if your email succesfully sent

if($sentmail){

echo "Your Password Has Been Sent To Your Email Address.";

}

else {

echo "Cannot send password to your e-mail address";

}

 

?>

[Lamez]

Please use the code tags. Also, add "or die(mysql_error())" to the end of your mysql_query function. Like mysql_query($sql) or die(mysql_error());

[laffin]

uhm whats the difference in using a random generated password and a real password?

instead of a password, just give them a link with a token and give it like 12 hr expiration period.

 

but ta will have to create a new table of these tokens and expiration period. just keep it simple