Forgot password

ableitc

I have a PHP script that produces invoices for me. However ...

There is obviously restricted access but there is no option to retrieve or send a password to the client if they forget it.

Has anyone got some code to use so that the user can be emailed there password or a new password.

Details : Using PHP, l capture username, password and email, using MySQL and the passwords are MOD5

Hope someone can help

Cheers, Grant

laserlight

Could check out [man]mail/man, or PHPMailer

btw, you mean MD5, not MOD5 right?

ableitc

Sorry yeah meant MD5. I have the relevant mailer in place, bit of a beginner. using PHP and it emails fine.

What l need is the code for a page that will pick up the password from MySQL DB and email it to the user ...

Sorry if l didnt explain that too well

laserlight

Ah.

You'll need to work out how the user will be identified and validated (to deter spamming).

The rest would be standard code for retrieving from a mysql database.

ableitc

I was thinking just simply by login. So would create a page with the userid and email address required and then some sort of code to extract the password and email it to the matched email address. Or if that cant be done email a new one.

Do you have a code for such ?

laserlight

Oh yeah.
You're using an md5 hash, so in theory there is no computationally feasible method to get the original password.

It becomes even simpler then.
Once the username and email is validated (i.e. belong to the same user in the database), then just generate a new password and email it.

ableitc

Okay brilliant but as l am new'ish to PHP have you got the code to do this. I can obviously change the MySQL bits