Lost Password Program

[docslinks]

I was wondering if anyone could point me in the direction of a PHP program that can send a user their password if they have forgotten it.

My accounts do not house sensitive information, therefore I do not want to generate a random new password and have them change it when they log in, I simply want them to:

Enter their email
If the email is found in the database then send their account info (username and password) to that email.

So far I could not find an example to do this with.

Thanks!

[cgraz]

make a form for them to enter their email. then check the db, if it exists, email them their password.

// on form processing page

$query = mysql_query("SELECT password FROM table WHERE email='" . $_POST["email"] . "'") or die(mysql_error());

if (mysql_num_rows($query) == 0) {
   echo "Email not found";
} else {
   // email them their password

$row = mysql_fetch_array($query);

$to = $_POST["email"];
$headers = "From: [email][e-mail][/email]";
$subject = "Here's your password";
$msg = "Your password is " . $row["password"];

mail($to, $subject, $msg, $headers);

echo "your password has been sent";

}

Something along those lines.

Cgraz

[docslinks]

Thanks for the info, everywhere I looked wanted to make it so difficult with random passwords and things like that.

Thanks again

[SirOliver]

Could you please tell me what is the difference between

("SELECT password FROM table WHERE email='" . $_POST["email"] . "'")

and

("SELECT password FROM table WHERE email='$email')

?

[cgraz]

sure. $_POST['email'] is referring to variable email coming from a form with a method of post. That means

<form method="post" action="bla.php">

<input type="text" name="email">

</form>

I could use $email to access the form variable, but for most servers (depending on how they're configured) to access $email, you'd need to use $_POST['email']

Same with anything in the URL (which would be a method of GET)

if your url looked like this www.yourdomain.com/index.php?p=whatever

to access variable p, you could use $p (if globals were set to on in your settings), but most servers require you to use $GET['p'] ($GET and $_POST are both globals)

Hope this made sense.

Cgraz

[SirOliver]

yes, it makes sense 🙂

the thing is just about php.ini - if global variables are turne on or off.

Tnx!