I got mine from http://www.hostrs.com/ and made it fit what I wanted.
it has forgot password, and mySQL, as far as secure it stores the password as plain text in teh database field so that may be a risk. It uses MD5 when passing the passwords around in the browser so thats a plus.
If somebody with a tinybit of talent got a page on your site that said select * from users, then said $Uname, $Pword <br /> Bob's your uncle theres the whole list. So when you say secure you have to think of how the passwords are stored in the db.
I downloaded one form http://free-php.net also, thinking that I might change over to it.
