Help with a lost password script.

batman

Hello,

What I am trying to do is make it to where people can either request there password by just an echo for fast results, or send it to there email.

Now, obviously they don't remember there password if they've come to this page, so I won't be asking for it. I will, however, be asking for there email address. What I need to do is set it up to where when they fill out everything correctly it will FETCH the array 'password' from the database according to the email provided. This is my code below.


<?
include 'db.php';

$mail = $_POST ['mail'];
$nomail = $_POST ['nomail'];
$email = $_POST ['email_address'];
$answer2 = $_POST ['answer'];

if((!$mail) && (!$nomail))
{
echo "Please tell us how you would like to receive your password. <br>";
include 'lost_pw.html';
exit();
}

if(!$answer)
{
echo "Please tell us what your secret answer <br>is in order to receive your password. <br>";
include 'lost_pw.html';
exit();
}


$sql_check = mysql_query("SELECT * FROM users WHERE email_address='$email_address'");
	$sql_check_num = mysql_num_rows($sql_check);
	if($sql_check_num == 0){
		echo "No records found matching your email address<br />";
		include 'lost_pw.html';
		exit();
	}


$sql = mysql_query("SELECT * FROM users WHERE answer='$answer'");
$sql2 = mysql_num_rows($sql);

if($answer2 == $sql2)
{
	echo "I'm sorry, you did not give the correct answer!<br />";
	include 'lost_pw.html';
	exit();
}

$sql = mysql_query("SELECT * FROM users WHERE pass='$pass' AND email_address='$email_address'");
$row = mysql_fetch_array($sql);
$password = $row['pass'];





if($mail == 'no')
{
echo "<b>Your password is: <font color=red>$password</font></b> <br>";
include 'login_form.html';
exit();
}

else
{
	echo "<strong>Your new password has been sent to your e-mail!</strong><br />";
	include 'login_form.html';


$subject = "Your Password for MSP Inc.!";
$message = "Hi, here is your new password.

Password: $random_password

[url]http://www.mysite.com/login_form.html[/url]

Thanks!
The Webmaster

This is an automated response, please do not reply!";

mail($email_address, $subject, $message, "From: MSP Inc.<my email>\nX-Mailer: PHP/" . phpversion());

}

?>

Can anybody find any errors??

Thanks for any help!
-Blake

jpmoriarty

well personally i think it's a bit cheeky for you to post code and ask us to test it for you - are you not capable of doing it yourself? We're usually pretty good at helping people fix mistakes, but just to churn out code, post it here and effectively say "hey, i wrote this, can someone check it for me and post any corrections if they're needed" it just downright lazy.

that said, i cant see you defining $randon_password anywhere (and you'd see that if you bothered to test the file yourself). And if you are going to give them a new password, then you'll need to write some sql to put that into the database alongside the existing user name.

batman

What's your problem? I never said anything about testing it for me. I have tried and tried hundreds of times to get this code to work so don't give me a bunch of crap. I see posts out there all the time where they'll post the code and ask someone to check it for them to see if there's any errors, so why can't I? Besides I didn't say the code didn't work, if you would have seen this line in my post "What I need to do is set it up to where when they fill out everything correctly it will FETCH the array 'password' from the database according to the email provided." Then you would have know hey, this guy only needs help with ONE thing and that's to get the value back from the database. I have no clue how to do it or I wouldn't be asking for help. Now I ask again, can anybody please find my error in this part of the code?


$sql = mysql_query("SELECT * FROM users WHERE pass='$pass' AND email_address='$email_address'");
    $row = mysql_fetch_array($sql);
    $password = $row['pass'];

then I call it like this:

if($mail == 'no')
{
echo "<b>Your password is: <font color=red>$password</font></b> <br>";
include 'login_form.html';
exit();
}

But it simply doesn't show anything. So my problem is it isn't somehow returing a value.

Thanks for any help,
-Blake

diego25

Where's your mysql_connect and mysql_select_db? You need to connect to the database and select a db before you query it...

Diego

batman

If you look in the original code, way at the top I have an include db.php line. All the database connections are in there.

-Blake