[Resolved] [Resolved] send password script!!!

[sirTemplar]

hi. i just found a send password script here. this is the script.

$db_host  = ''; 
$db_user  = ''; 
$db_pass  = ''; 
$db_name  = ''; 
$db_table = 'mytable'; 
$conn = mysql_connect($db_host,$db_user,$db_pass); 
mysql_select_db($db_name,$conn);  

mt_srand((double)microtime() * 1000000); 
$charlist = "qwertyuiopasdfghjklzxcvbnm1234567890"; 
$newpass = ''; 
$max = strlen($charlist) - 1; 
for ($i = 0; $i < 10; $i++) { 
    $randnum = mt_rand(0, $max); 
    $newpass .= $charlist{$randnum}; 
} 
$newpass2= md5($newpass); 
$email=$_POST["email"]; // this value is from a form wherein they input their email add

$sql = "SELECT * FROM mytable where email = '$email'"; 
$result = mysql_query($query); 
if(mysql_num_rows($result) == 0) { 
echo "Your email address is not in the database."; 
} 
else {
$sql2 = "UPDATE mytable SET 
    password='$newpass2' 
    WHERE email='$email'"; 
if ($result2 = mysql_query($sql2)) { 
$femail= "[e-mail]"; 
$temail= $email; 
$message="Hi there, as requested please find your new password below:\n\nPassword: $newpass\n\nPlease login and change your pass immediately"; 
if(mail($temail,":: Password Reminder ::",$message,"From: $femail\n")) { 
echo "We have sent an email including your new pass to $email"; 
} else { 
echo "Sorry, there was a problem sending your reminder. Please try again letter or contact an admin."; 
} 
}
}
?> 

the problem is i always get:
Your email address is not in the database.

though i'm sure that the email add exists! thanks.

[onion2k]

Is your database table really called "mytable"?

[sirTemplar]

actually it's tableusers, i just put it mytable here!

[sirTemplar]

i changed something in the above code. now it works, i.e. it sends a new password to the email entered on the form. but the problem is this. when someone enters an email add which is not in the database table, it still echoes that a new password is sent! i think the problem is somewhere here...

$result = mysql_query ("SELECT * FROM users  

                         WHERE EMAIL = '$email' 
                       ",$conn);  

    $num = mysql_numrows( $result ); 
    if ( $num != 0 )  

    { 
        echo "<font face=Verdana size=4 color=#FF0000>your email address is not in the database"; 
        exit(); 
    } 

this should check first if the email add entered on the form is an email which is on the database. if not it should not go on.

any idea where the problem is???

[sirTemplar]

it was just a matter of putting. <? ?> ! it is resolved