PHP - Forgot Admin Password - Help - Can't Get Back In! Noob!

I am sure this is a simple fix and I am total beginner but thanks to these forums learn alot

Here is the code:

Code: [Select]
http://$host/forgot.php?doReset=Reset&VeriCode=$new_code
And when I click the link in email I get the following error

The requested URL /forgot.php?doReset=Reset&VeriCode=60dea138b76c71acccfe34d4fab3e004 was not found on this server.

If someone needs the full code to help, please PM me.

I'm having a little issue with this script. It's returning:

"Warning: mysql_num_rows(): supplied argument is not a valid MySQL result resource in /home/zyquo/public_html/makethemoviehappen.com/forgot_password.php on line 89"
(Line 89 is: $num_rows1 = mysql_num_rows($result1)

and

"New password could not be generated. If you continue to have issues, please email general@makethemoviehappen.com for assistance."

I checked the database and the random password generation did run, and it was inserted into the database. So it's just not detecting that it ran, so it's not sending the email. Any ideas on why?

I also checked what is returned in the $result1 variable and it's the number 1.


Code: [Select]
elseif($_GET['forgot']=="password"){
 
function &generatePassword($length=9, $strength=0) {
        $vowels = 'aeiuy';
        $consonants = 'bcdfghjkmnpqrstwz';
        if ($strength & 1) {
                $consonants .= 'BCDFGJLMNPQRSTVXZ';
        }
        if ($strength & 2) {
                $vowels .= "AEIUY";
        }
        if ($strength & 4) {
                $consonants .= '23456789';
        }
        if ($strength & 8) {
                $consonants .= '@#$%';
        }
 
        $password = '';
        $alt = time() % 2;
        for ($i = 0; $i < $length; $i++) {
                if ($alt == 1) {
                        $password .= $consonants[(rand() % strlen($consonants))];
                        $alt = 0;
                } else {
                        $password .= $vowels[(rand() % strlen($vowels))];
                        $alt = 1;
                }
        }
        return $password;
}
 
$new_password =& generatePassword();
 
$username=$_POST['username'];
$sql="SELECT * FROM $tbl_name WHERE Username='$username' AND Email='$email' AND Amount='$donation_amount'";
$result=mysql_query($sql);
$num_rows = mysql_num_rows($result);
 
if($num_rows==1){
$sql1="UPDATE $tbl_name SET Password='$new_password' WHERE Username='$username' AND Email='$email' AND Amount='$donation_amount'";
$result1=mysql_query($sql1);
$num_rows1 = mysql_affected_rows($result1);
 
if($num_rows1==1){
$content.='<p class="center">New password generated. It has been emailed to the email address provided.</p><br />';
$message='Some one (hopefully you) requested a new password be generated for your account on Make the Movie Happen.
Below is the newly generated password:
 
Password: '.$new_password.'
 
Once you log-in, please change your password.
 
Thank You,
Make the Movie Happen Support Team
';
mail($email, 'Make the Movie Happen - New Password', $message, 'From: general@makethemoviehappen.com');
}
 
else{
$content.='New password could not be generated. 
If you continue to have issues, please email <a href="mailto:general@makethemoviehappen.com">general@makethemoviehappen.com</a> for assistance.';
}
 
}
else{
header("Location: ./index.php?forgot&e=1");
}
}

I paid someone to develop my site and for some reason the Forgot Password page is not working.  Once the user types in their email address and submits, nothing happens.  The user should get a message displayed instantly letting them know if the password was sent or if their account was not found.

Any help would be greatly appreciated!

Code: [Select]
[php]
<?
   include_once "connect.php";
   if(isset($_SESSION['RES_LoginID']) && $_SESSION['RES_LoginID']!="")
   {
      echo "<script>window.location='myprofile.php';</script>";
      exit;
   }
   
   // code to send mail to user (account details)
   if(isset($_REQUEST["btnLogin"]))
   {
      $sel="select name,email,password from users where email='".$_REQUEST['RES_EMAIL']."'";
      $urs=mysql_query($sel);
      if (mysql_affected_rows()>0) // send mail if mail existing in database
      {
         $row=mysql_fetch_array($urs);
         $name=$row['name'];
         $username=$row['email'];
         $password=$row['password'];

         $message="<link href='".WEBSITEURL."site.css' rel='stylesheet' type='text/css' />
            <body>
            <table border=0 cellspacing='5' cellpadding=0 width=600 align='center' class='purple_11'>
            <tr><td>
               $SITE_LOGO<br><br>
               Dear <b>".$name."</b>,<br><br>
               
               Your login details a <br>
               Username : $username<br>
               Password : $password<br>
               <br><br>
               Login at: <a href='".WEBSITEURL."login.php' target='_blank'>$SITE_NAME</a><br><br><br>
               Thank You,<br>
               $SITE_NAME
            </td></tr></table>
            </body>";
   
         $sub="Forgot Password?";
         
         SendHTMLMail($username,$sub,$message,ADMIN_MAIL);

         $redirect="<script>window.location='forgot_password.php?msgs=1';</script>";
      }   
      else // if mail doesnot match
      {
           $redirect="<script>window.location='forgot_password.php?msgs=2';</script>";
      }
      echo $redirect;
      exit;
   }
   
   // generate message for display
   $msg="";
   if(isset($_REQUEST['msgs']))
   {
      switch($_REQUEST['msgs'])
      {
         case 1 :   $msg="Your password sent successfully.";
                  break;
         case 2 :   $msg="Email Address does not exists.";
                  break;
      }
   }
?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "[url=http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd]http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd[/url]">
<html xmlns="[url=http://www.w3.org/1999/xhtml]http://www.w3.org/1999/xhtml[/url]">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<meta name="keywords" content="<?=$KEYWORD?>" />
<link rel="shortcut icon" href="images/favicon.gif">
<title><?=$SITE_TITLE?></title>
<link href="site.css" rel="stylesheet" type="text/css" />
<script language="javascript">
function valid_login()
{
   form=document.frmLogin;
   if(form.RES_EMAIL.value=="")
   {
      alert("Please enter your email.")
      form.RES_EMAIL.focus();
      return false;
   }
   else if (!(/^\w+([\.-]?\w+)*@\w+([\.-]?\w+)*(\.\w{2,3})+$/.test(form.RES_EMAIL.value)))
   {
         alert("Please enter a proper email address.");
         form.RES_EMAIL.focus();
         return false;
   }   
   else
   {
      form.submit();
   }   
}
</script>
</head>

<body onload="MM_preloadImages('images/about-us-hover.jpg','images/my-pofile-hover.jpg','images/help-hover.jpg','images/home.jpg')">
<table width="1000" border="0" align="center" cellpadding="0" cellspacing="0">
  <tr>
    <td width="1251" align="center" valign="top" class="main_bg"><table width="850" border="0" align="center" cellpadding="0" cellspacing="0">
      <tr>
        <td height="153" align="left" valign="top"><? include_once "top.php"; ?></td>
      </tr>
      <tr>
        <td valign="top"><table width="100%" border="0" cellspacing="0" cellpadding="0">
            <tr>
              <td height="18"></td>
            </tr>
            <tr>
              <td><table width="822" border="0" align="center" cellpadding="0" cellspacing="0">
                  <tr>
                    <td width="11" align="left" valign="top"><img src="images/white-crv1.jpg" width="11" height="11" /></td>
                    <td width="100%" height="11" class="gray-top-bdr"><img src="images/blank-img.gif" width="1" height="1" /></td>
                    <td width="11" align="right" valign="top"><img src="images/white-crv2.jpg" width="11" height="11" /></td>
                  </tr>
                  <tr>
                    <td width="11" class="gray-left-bdr"><span class="gray-top-bdr"><img src="images/blank-img.gif" width="1" height="1" /></span></td>
                    <td align="center"><?   include("gad_hori.php");?></td>
                    <td width="11"class="gray-rightt-bdr"><span class="gray-top-bdr"><img src="images/blank-img.gif" width="1" height="1" /></span></td>
                  </tr>
                  <tr>
                    <td width="11" height="11" align="left" valign="bottom"><img src="images/white-crv3.jpg" width="11" height="11" /></td>
                    <td height="11" class="gray-bot-bdr"><img src="images/blank-img.gif" width="1" height="1" /></td>
                    <td width="11" height="11" align="left" valign="bottom"><img src="images/white-crv4.jpg" width="11" height="11" /></td>
                  </tr>
              </table></td>
            </tr>
            <tr>
              <td height="73" align="left" valign="top"></td>
            </tr>
            <tr>
              <td align="left" valign="top"><table width="822" border="0" align="center" cellpadding="0" cellspacing="0">
                <tr>
                  <td width="587" align="left" valign="top"><table width="587" border="0" cellspacing="0" cellpadding="0">
                    <tr>
                      <td width="19"><img src="images/gray-left-crv.jpg" width="19" height="247" /></td>
                      <td width="321" align="left" valign="top" class="gry-bg-rpt">
                 <form name="frmLogin" id="frmLogin" action="" method="post">
                 <table width="100%" border="0" cellspacing="0" cellpadding="0">
                        <tr>
                          <td height="20"></td>
                        </tr>
                        <tr>
                          <td height="27" class="gray-bot-bdr red-txt20" valign="top">Forgot Password?</td>
                        </tr>
                        <tr>
                          <td height="25" align="center" valign="middle" class="red-txt12"><?=$msg;?></td>
                        </tr>
                        <tr>
                          <td><table width="100%" border="0" cellspacing="0" cellpadding="0">
                            <tr>
                              <td colspan="2" height="22" align="left" style="padding-left:15px;"><strong>Please enter your E-mail address to get the password .</strong></td>
                            </tr>
                            <tr height="15"><td>&nbsp;</td></tr>
                            <tr>
                              <td width="33%" align="center"><strong>Email Address :</strong></td>
                              <td width="67%"><input name="RES_EMAIL" type="text" class="input"  style="width:176px; height:20px;"/></td>
                            </tr>

                            <tr>
                              <td>&nbsp;</td>
                              <td height="40" align="center">
                          <input type="submit" name="btnLogin" value="" class="btn_submit" title="Sign In" onclick="return valid_login();" />
                       </td>
                            </tr>
                            <tr>
                              <td>&nbsp;</td>
                              <td height="25" align="left" valign="bottom">Know your password? <a href="login.php">Login here</a></td>
                            </tr>
                          </table></td>
                        </tr>
                      </table>
                 </form>
                 </td>
                      <td width="247" align="left" valign="top" class="red-box2"><table width="100%" border="0" cellspacing="0" cellpadding="0">
                        <tr>
                          <td height="88">&nbsp;</td>
                          <td>&nbsp;</td>
                        </tr>
                        <tr>
                          <td width="77">&nbsp;</td>
                          <td><table width="100%" border="0" cellspacing="0" cellpadding="0">
                            <tr>
                              <td height="85" align="left" valign="top"><img src="images/dont-acc.jpg" width="135" height="65" hspace="10" /></td>
                            </tr>
                            <tr>
                              <td height="40" align="left" valign="top"><a href="register.php"><img src="images/register-but.jpg" alt="Register Here" width="146" height="30" border="0" /></a></td>
                            </tr>
                          </table></td>
                        </tr>
                      </table></td>
                    </tr>
                  </table></td>
                  <td width="235" align="right" valign="top"><?   include("square_ads.php");?></td>
                </tr>
              </table></td>
            </tr>
        </table></td>
      </tr>
      <tr>
        <td valign="top"><? include_once "bottom.php"; ?></td>
      </tr>
    </table></td>
  </tr>
</table>
</body>
</html>[/php]

Hello,

My user login script saves their passwords into my SQL in a md5 encryption.

I am currently working on a 'forgot password' that sends the password to their email.

The code that pulls out the password is this:

 echo $req_user_info['pass'];

Now is there a way to decrypt the 'pass' (currently nothing is displayed - not even the encryption code)

Please help - Ollie

Hello everyone:

I wanted to see how I can make a simple login page (user name and password) that redirects to a page(s) if the login is correct. Also, I wanted to put protection on the page(s) that will send the user back to the login page if the credentials are nor correct.

I would imagine the username/password would be stored in a database table (Admins), and the correct login info would be stored in a session ..?

I am use to doing this with ASP, but never PHP. I want to make sure I understand how to do this properly and securely so I can use this as a model for other systems.

In ASP I would do a protected page like this:
a_login_check.asp
Code: [Select]
<%
if session("admin_user_name") = "" then
session.abandon
response.redirect "login.asp"
end if
%>

Protected-Page.asp
Code: [Select]
<!-- #include file="include/a_check_login.asp" -->
<html>
...
CONTENT

...
</html>

And of course there is the login page itself ...
(I thought it would be nice to add a "Forgot Password" link on the login page, but if that is too complicated I can do that later .. or is it easy ??)

Anyway, can someone point-out to me how to do this.

I would appreciate it!