Strange Error

[SP8600]

When i use the code below i get a very strange error:

Unknown has generated errors and will be closed by windows. You will need to restart the program

Now what the code does is find a users email address or username in the database and saves a new password for them and emails it to thier email address if they have forgot their old password. This works fine if the user does exist in the database, however if the users email address or username is not entered properly then it comes up with that strange error dialog box. How can i solve this problem.

Thanks

<?php
if ($_GET['forgot_action']=="submit"){
$uname = mysql_escape_string($_POST['uname']);
$email = mysql_escape_string($_POST['email']);
$newpass = rand();
$newpassmd5 = md5($newpass);

$forgot_sql = "UPDATE clients SET password='$newpassmd5' WHERE username='$uname' OR email='email'";

  $forgot_result = mysql_select_db("$db_name"); 
  mysql_query("$forgot_sql");
  if ($forgot_result){

$forgot_info = "SELECT username,email FROM clients WHERE username = '$uname' OR email = '$email'";

$forgot_info_result = mysql_query($forgot_info);
$forgot_info_number = mysql_num_rows($forgot_info_result);
$forgot_info_row = mysql_fetch_assoc($forgot_info_result);

$send_email = $forgot_info_row['email'];
$username = $forgot_info_row['username'];


  if ($forgot_info_result){
  mail("$send_email","Requested Information","This is an automatic response for the information you requested.

Username: $username
Password: $newpass");?>
   <span class="maintext">A new password has been sent to <?php echo $forgot_info_row['email']; ?>.</span>

<?php   

}
else{
    echo ("Incorrect details.");
}
}

}
?>

[128kb_com]

With a quick glance at your code, I noticed that the email in $forgot_sql is missing a $

$forgot_sql = "UPDATE clients SET password='$newpassmd5' WHERE username='$uname' OR email='email'";

[stezz]

In your SQL queries.. insted of using "OR" (e.g. SELECT * FROM (table) WHERE This = '$that' OR That = '$this')

use "AND"..

$result = mysql_query("SELECT * FROM (table) WHERE This = '$that' AND That = '$this';");

I have a gut feeling your problem lies there.. some logical error maybe?

Good Luck..

Regards, Stezz.

[SP8600]

That still doesnt get rid of the error of if a users details are incorrect it still brings up that error dialog box.

[SP8600]

Any idea how to get rid of that error i described in the first post.

[diego25]

What kind of invalid input throws that error?

Diego

[SP8600]

If the username OR email address does not exist in the database.

[diego25]

Try putting an if-statement before the UPDATE query, to check if the e-mail exists. If it doesn't, output error. If it does, update.

Diego