lost password script?

[LanceT]

Anyone have any code for a lost password script? Similar to what most forums have if their users lose their password (will generate a new random password and then is e-mailed to the user). Thanks.

[EKINdesigns]

I wouldn't do it this way.  I would have them enter their email, send them an email with a verification link where they can set a new password.  It avoids a lot of confusion.

[LanceT]

I wouldn't do it this way.  I would have them enter their email, send them an email with a verification link where they can set a new password.  It avoids a lot of confusion.

 

how would you do this ?  ???

[obsidian]

To answer your initial question, have a user enter their email address (since, hopefully you're only allowing each email address to be used once), then run some sort of random password generator. Here's one that I've used in the past:

<?php
function generate() {
  $hash = md5(time());
  return substr($hash, 0, ;
}
?>

 

Then, just set their password to that value, and then send them an email with the updated password. Of course, make sure you have them confirm at least once that they do want it reset before you use this method