Changing users password......and

[grail]

Im trying to accomplish two things, ones a form that a user can fill out that changes the users password and two, a form that will retrieve a password from the database if two id criteria are met (both of which are contained in the database). The forms are not the problem but the scripts that talk to the database for both these issues elude me.

The database is postgreSQL

Problem one
Im willing to start from scratch here. I need a change password script that will check a users username and password (via variables entered from a form) and then replace the old password with the new password specified in said form. All elements to be checked are contained within the database table to be updated. In addition I need it to return whether it was successfull or not. Ive developted a script that will update the database, but it wont return the proper error line if inaccurate user information is submitted.

Problem two
I also need a script that will retrieve a password from the database if identification criteria are met (in this case, a username and a social security number) and then display that password for the user to see.

Does anybody have a simple script that can accomplish this by pluging in my particular variables and database info?

Thank you VERY much for any assistance
NOTES:
Security is not a large issue

[Anon]

Problem one
Im willing to start from scratch here. I need a change password script that will check a users username and password (via variables entered from a form) and then replace the old password with the new password specified in said form. All elements to be checked are contained within the database table to be updated. In addition I need it to return whether it was successfull or not. Ive developted a script that will update the database, but it wont return the proper error line if inaccurate user information is submitted.

$result = pg_exec("SELECT username from login_table where username='$username' AND password='$password'");
$num = pg_numrows($result); // If it returns any rows, you know that is a valid login
If ($num == 1) {
$result2 = pg_exec("UPDATE login_table SET password = '$new_password' WHERE username = '$username'");
echo "Password Changed";
} else {
echo "Incorrect login information";
}

Problem two

I also need a script that will retrieve a password from the database if identification criteria are met (in this case, a username and a social security number) and then display that password for the user to see.

$result = pq_exec("SELECT password from login_table where username='$HTTP_POST_VARS[username]' AND ssn='$HTTP_POST_VARS[ssn]'"); // Presumed that username and ssn are passed from a form

$num = pg_numrows($result); // I only check to see if it is equal to 1 since you would only want 1 result returned if you have a unique identifier for your clients
If ($num == 1) {
$password = pg_result($result, 0); echo "Your password is: $password";
} else {
echo "Your information could not be found.";
}

[grail]

Thanks for the help John, both your solutions worked very well.

[Anon]

Always glad to help. 😉

John