don't send users their old passwords. its a bad idea.
instead, encrypt passwords using a one way encryption method like md5 and store that on the database. if the user requests their password, reset the password to something like a random 6 character string with uppercases and lowercases and numbers, and send the users the NEW passwords via the email address they provided when the created the account.