PHP - Change Password Function

I'm trying to let the users change their password, but everytime I try.. it just changes the password to what they type in whether or not the password they currently have is right or not.. x_x
I have the password set as an MD5 so I'm guessing I have to select the password from the database as an MD5, but I don't know how to do that..

<?php
include("logincheck.php");
$newpass = $_POST['newpass'];
$username = $_SESSION['username'];
$password = $_POST['password'];
?>
<?php include_once("header.php"); ?>
Welcome to your settings. This is where you can manage everything on your account!
<br><br>----------<b>Change Password</b>----------

<form action="<?php echo $_SERVER['SCRIPT_NAME']?>" method="post">

<?php
$type = "text";
echo "
<p>Type your current password:<br>
<input size='25' name='password' type='$type'></input></p>
<p>Type your new password:<br>
<input size='25' name='newpass' type='$type'></input></p>
<p>Verification:<br>
<img src='randomimage.php'><br>
<input name='txtNumber' type='text' id='txtNumber' value=''>
<br>";
?>

<input type="submit" name="changepass" value="submit" />
</form>

<?php
if (@$_POST['changepass']) {
include("haha.php");
$cxn = mysqli_connect($dbhost,$dbuser,$dbpassword,$dbdatabase);
$sql = "SELECT `password` FROM `Member` WHERE `username`='$username'";
$result = mysqli_query($cxn,$sql) or die("Query died: password");
if($result = $password) //password matches
{
$number = $_POST['txtNumber'];
if (md5($number) == $_SESSION['image_random_value'])
{
$sql = "UPDATE Member SET password = md5('$newpass') WHERE username = '$username'";
mysqli_query($cxn,$sql) or die("Query died: update");
}}}
?>
<?php include_once("footer.php"); ?>

hi folks I have a problem with the code to change the password, it shows the message all time when  I send the form:  old password dont match!


<?php
session_start();

$user = $_SESSION['first_name'];

if ($user)

{

//user is logged in

if ($_POST['submit'])

{

//check fields

$oldpassword = md5($_POST['oldpassword']);

$newpassword = md5($_POST['newpassword']);

$repeatnewpassword = md5($_POST['repeatnewpassword']);

//check password against db

//connect db

$connect = mysql_connect("*******","****","****") or die("");

mysql_select_db("****") or die("");

$queryget = mysql_query("SELECT password FROM users WHERE username='$user'") or die("Query didnt work !!!");

$row = mysql_fetch_assoc($queryget);

$oldpassworddb = $row['password'];

 

//check password

if ($oldpassword==$oldpassworddb)

{

//check to new password

if ($newpassword==$repeatnewpassword)

{

  //success

  //change password in db

  $querychange = mysql_query("UPDATE users SET password='$newpassword' WHERE username='$user'") or die ("");

  

  session_destroy();

  

  die("YOUR PASSWORD HAS BEEN CHANGED.<a href='login_form.html'>RETURN</a> TO THE LOGIN PAGE");

  

}

else

     

    die("new password dont match");

}

else 

   
      die("old password dont match");

}

 else

 {

echo"

<form action='changepassword.php' method='POST'>

Old password: <input type='text' name='oldpassword'><br/>

New password: <input type='password' name='newpassword'><br/>

Repeat new password: <input type='password' name='repeatnewpassword'><br/>

<input type='submit' name='submit' value='change password'>

</form>";

 }
}
else
    echo("YOU MUST BE LOGGED IN!!!!.<br><a href='login_form.html'>RETURN</a> TO THE LOGIN PAGE");

 

?>


please help thanks!

Hi folks!  Upon registering, my register script runs an md5 hash on the password.  My problem is when the user wants to change passwords.  currently I have a very simple profile, and when they edit it, it doesn't rehash the password- it simply replaces the entire hashed old password with the plain, new password.  Any way I could get the script to rehash the password?

editprofile.php
<?php

include('config.php');
include('header.php');
if($_SESSION['id']=="") {
     header("Location: YouMustLogInNotice.html");
    }

 
if(isset($_POST['btnedit'])){
$callname = $_POST['callname'];
$email = $_POST['email'];
$password = $_POST['password'];
 
$sql = mysql_query( "UPDATE users SET callname='".$callname."', email='".$email."', password='".$password."' WHERE id='".$_SESSION['id']."'" );

if($sql){
echo "<script>alert('profile updated');window.location='myprofile.php?id=$userfinal'</script>";
}else{
echo "<script>alert('updating profile failed!');</script>";
}
 
}
 
 
 
 
$sql = mysql_query( "SELECT * FROM users WHERE id='".$_SESSION['id']."'" ); 
$row = mysql_fetch_array($sql);


$user = $userfinal;

echo "<td align=center>

<div id=box>
<table width='100%'>
<tr>
<td><h2>Edit profile</h2>
<form method='post'>
<table><tr><th>ID#:</th><td>".$user."</td></tr>
<tr><th>Name:</th><td><input type='text' name='callname' value='".$row['callname']."'/></td></tr>
<tr><th>Email:</th><td><input type='text' name='email' value='".$row['email']."'/></td></tr>
<tr><th>Password:</th><td><input type='password' name='password' value='".$row['password']."'/></td></tr>
<tr><th>Registered:</th><td>".$row['registered']."</td></tr>
<tr><th>Last Login:</th><td>".$row['lastlogin']."</td></tr>
</table><br />
<input type='submit' name='btnedit' value='update' class=button />
</form></div></td>
</tr>
</table>
</td></tr>
</table>";
 
 
 ?>
 <?php

include('footer.php');

?>

Hi there,

I've set up  a basic password change that sends an email to the client when they change their password. The email notify's the client that their password has been changed and what the password is. The current problem I'm receiving is that when the user changes their password  the message confirms that an email has been sent however, the email never arrives. The original email only arrives when the client changes their password again and they receive their first password change not their new password change.

Can you help?? my code is below:

Code: [Select]
<?php

$host="localhost"; // Host name 
$username="root"; // Mysql username 
$password="*******"; // Mysql password 
$db_name="testpwreset"; // Database name 


//Connect to server and select database.

$con=mysql_connect("$host", "$username", "$password");
mysql_connect("$host", "$username", "$password") or die("cannot connect to server"); 
mysql_select_db("$db_name") or die("cannot select DB");

// value sent from form 
$email_to=$_POST['email_to'];
$old_password=$_POST['old_password'];
$new_password=$_POST['new_password'];
$new_password2=$_POST['new_password2'];

if ($new_password != $new_password2) {die("Your passwords do not match");}

// table name 
$tbl_name=members; 
mysql_query("UPDATE $tbl_name SET password = '$new_password' WHERE email = '$email_to' AND password = '$old_password'");




// retrieve password from table where e-mail = $email_to(*****@gmail.com) 
$sql="SELECT password FROM $tbl_name WHERE email='$email_to' AND password = '$old_password'";
$result=mysql_query($sql);

// if found this e-mail address, row must be 1 row 
// keep value in variable name "$count" 
$count=mysql_num_rows($result);

// compare if $count =1 row
if($count==1){
$asdf=mysql_query("UPDATE $tbl_name SET password = '$new_password' WHERE email = '$email_to' AND password = '$old_password'");
$rows=mysql_fetch_array($result);

// keep password in $your_password
$your_password=$rows['password'];
// ---------------- SEND MAIL FORM ---------------- 

// send e-mail to ...
$to=$email_to; 

// Your subject 
$subject="Your Tafe FTP Password"; 

// From 
$header="from: your name \<your email\>"; 

// Your message 
$messages= "Your password for login to the Orange Tafe IT Ftp Server is: $your_password \r\n";



// send email 
$sentmail = mail($to,$subject,$messages,$header); 

}

// else if $count not equal 1 
else {
echo "Cannot find your email in our database";
}

// if your email succesfully sent 
if($sentmail){
echo "Your Password Has Been Sent To Your Email Address.";
}
else {
echo "Cannot send password to your e-mail address";
}

?>

Hey all. I am new to this forum and to PHP as a whole. I though I would try to make a login system using php and mysql. The login and register forms work great but I cannot seem to fully figure out how to let a user change their password. My code partially works. When the user types the correct old password and when the two new password forms confirm, the password changes and the database is updated and the user is taken to a page that tells him that his password was successfully changed. However, the problem is when the old password he types is different than the one in the database, the page that states password successfully changed also appears but the password is not changed in the database. The problem is thus with the SELECT statement. Can anyone please help me find whats wrong. It has been tormenting for a few hours now. Thank you in advance. . I used md5 encryption for the passwords. Here is the section of code that comes after the script makes sure that none of the forms are empty and that the passwords confirm  .

//Create SELECT query to verify that the old password is correct
$qry="SELECT * FROM members WHERE login='" . $_SESSION['SESS_USERNAME'] . "' AND passwd='".md5($_POST['opassword'])."'";
   $result = mysql_query($qry);
   if($result)
   {
   //Create UPDATE query to replace old password with new password
   $updatepasswd="Update members set passwd='".md5($_POST['npassword'])."' where login='" . $_SESSION['SESS_USERNAME'] . "' AND passwd='".md5($_POST['opassword'])."'";
   $update = mysql_query($updatepasswd);
   
   //Check whether the query was successful or not
   if($update) {
   
      header("location: changepasswordsuccess.php");
      exit();
      }
   else {
      die("Query failed");
   }
   }
   else
   {
   header("location: passwordchange-failed.php");
   }

hello everyone, i try to make a registration script and change password script with PIN as security code, registration script was working perfect, but change password script didn't work. here i give a full code for you to review.

here link to file Test.7z

I hope someone can help and give me information what i'am missing.

Hi guy,
Does any know how to add a variable value to the name of a function in a loop

e.g.
Code: [Select]
$i=1;
while($qryRowName = mysql_fetch_assoc($qryName)){
$i++;

function test$i(){
*****
}
Is this possible?

Please any help will be very much aprreciated


Thanks



}

Hi all , here is a question about a disabled button .

If I have a button:
Code: [Select]
<input id='submit' type='submit' disabled='disabled' value='submit'>
Is it possible to change the "disabled=true" through php function ? such as

Code: [Select]
function change_button(){

echo "<script language=\"javascript\">";

echo "document.getElementById('submit').disabled=true;";

echo "</script>";

}


I tried it , not working...is this function possible or have I make any mistake ?
Thanks for every reply .

This topic has been moved to JavaScript Help.

http://www.phpfreaks.com/forums/index.php?topic=330989.0

I used the move_uploaded_file function to upload files to my server ,but the function changes the Arabic names of files because most of my files are Arabic named  how can I fix that ?

Hello All

I currently have a function that takes in user input from form fields $email & $password. If all is well the function logs the user in, if not redirects back to the login form.

What I require is two things.

1) Allow the user to login with either "email" or "username" (entered in the $email form field).
2) Allow the system to have a "master" password and if that is entered with a valid email or user from above then log that user in.

Here is my current function, any help is greatly received.

Regards

  function loginMember($email,$password,$returnURL){
    
      if ($email != "" && $password != ""){        
        
        $result = mysql_query("SELECT mid,memberid,forename,surname FROM tbl001_member WHERE emailaddress='$email' AND password='".$password."' AND online=1");
        
        if (mysql_num_rows($result) > 0)
        {
            $row = mysql_fetch_row($result);
                        
            $_SESSION["logged_user"] = $row[2]." ".$row[3];
            $_SESSION["logged_id"] = $row[0];
            $_SESSION["logged_memid"] = $row[1];            
            
            session_unregister('wrong_email');
            
            if (isset($_SESSION["logged_user"]))
            {               
                header('Location:'.$returnURL);
                exit;
            }
        }
else
{
            session_register('wrong_email');
            $_SESSION['wrong_email'] = $email;
            return "* There is no registered account with typed email & password.";
        }
      }
  else
  {
          session_register('wrong_email');
          $_SESSION['wrong_email'] = $email;
          return "* Please input email and password correctly.";
      }
  }

I wrote a bunch of code just to realize that there's a huge security hole in my script.

Here's a how I've built it:

1. first you enter the new email address into the input box and click submit
2. an email gets sent to you where you have to click on an activation link to confirm the change, and of course the email gets send to the inbox to make sure it's a valid email
the activation link looks as follows:

Code: [Select]
http://localhost/changeemail_confirm.php?id=$dbuser_id&email=$user_email

The dbuser_id gets taken from the session variable, and the user email is the new entered user email.

3. After clicking the link you get directed to an activation page, I thought about letting the user enter his password and letting it match with the password in the database as added security, so he can't just change the user_id in the link so that the email of another user gets changed.

the query on the activation page looks like this:


"UPDATE user SET email = '$user_email' WHERE nickname = '$dbuser_name' AND WHERE user_id = '$id'";


The $id is being taking from the activation link per GET, and the $dbuser_name is being taking from the session variable.

And now this is the problem where I'm stuck, even though I've added a bunch of security, and even the necessary to enter a password there's still a major security hole, which is the user can easily change the email in the activation link to something else, something that is not a valid email.

E.g.
this

Code: [Select]
http://localhost/changeemail_confirm.php?id=35&email=mail@phpmail.local

can become to this, when the user manually edits the url and pastes it into his browser:

Code: [Select]
http://localhost/changeemail_confirm.php?id=35&email=MAIL@ANYTHING.com

How can I prevent this, is there any way I could tell the script the CONFIRMED and VALID email, with a more secure way?


BTW this script works as it is, it's just that the user can manually change the email to something else what makes this script worthless for now.

Hi all

Would like to ask for help .

Generally I would like to run a webpage which will display actual price + price movements of selected cryptocurrencies.

I´m recieving data from extrernal API. (JSON)
.
I already integrated currency function (usd), but I need to add also function for showing percent (%) change . (at "24 hour change" section)

This is how code looks like:

<?php 
$json = file_get_contents('https://api.coingecko.com/api/v3/simple/price?ids=bitcoin&vs_currencies=usd&amp;include_market_cap=true;include_24hr_vol=true;include_24hr_change=true'); 
$bitcoinPrice = json_decode($json);
 
$json = file_get_contents('https://api.coingecko.com/api/v3/simple/price?ids=dash&vs_currencies=usd&amp;include_market_cap=true;include_24hr_vol=true;include_24hr_change=true'); 
$dashPrice = json_decode($json);

$json = file_get_contents('https://api.coingecko.com/api/v3/simple/price?ids=netchain&vs_currencies=usd&amp;include_market_cap=true;include_24hr_vol=true;include_24hr_change=true');
$netchainPrice = json_decode($json);

$json = file_get_contents('https://api.coingecko.com/api/v3/simple/price?ids=pivx&vs_currencies=usd&amp;include_market_cap=true;include_24hr_vol=true;include_24hr_change=true');
$pivxPrice = json_decode($json);

function formatter($amount) {
  // $formatter = new NumberFormatter('en_US',  NumberFormatter::CURRENCY);
  return '$'.number_format($amount, 2);;
}
 ?>
<!DOCTYPE html>
<html lang="en">

<head>
  <meta charset="utf-8">
  <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no">
  <meta http-equiv="x-ua-compatible" content="ie=edge">
  <title>Masternodes monitor</title>
  <!-- Font Awesome -->
  <link rel="stylesheet" href="https://use.fontawesome.com/releases/v5.8.2/css/all.css">
  <!-- Bootstrap core CSS -->
  <link href="css/bootstrap.min.css" rel="stylesheet">
  <!-- Material Design Bootstrap -->
  <link href="css/mdb.min.css" rel="stylesheet">
  <!-- Your custom styles (optional) -->
  <link href="css/style.css" rel="stylesheet">
  <!-- MDBootstrap Datatables  -->
<link href="css/addons/datatables.min.css" rel="stylesheet">
</head>

<body>

  <table id="dtBasicExample" class="table table-striped table-bordered table-sm" cellspacing="0" width="100%">
  <thead>
    <tr>
      <th class="th-sm">Coin name
      </th>
      <th class="th-sm">ROI
      </th>
      <th class="th-sm">Daily income
      </th>
      <th class="th-sm">Price 
      </th>
      <th class="th-sm">24 change 
      </th>
      <th class="th-sm">Volume
      </th>
      <th class="th-sm">Marketcap
      </th>
      <th class="th-sm">Node price
      </th>
      <th class="th-sm">Coins for MN
      </th>
      <th class="th-sm">Nodes
      </th>
    </tr>
  </thead>
  <tbody>
    <tr>
      <td><img src="/img/btc.png" width="15" height="15" title="Bitcoin logo" alt="Bitcoin logo" />    Bitcoin (BTC)
</td>
      <td>Unknown</td>
      <td>Unknown</td>
      <td><?=formatter($bitcoinPrice->bitcoin->usd) ?></td>
      <td><?=formatter($bitcoinPrice->bitcoin->usd_24h_change) ?></td>
      <td><?=formatter($bitcoinPrice->bitcoin->usd_24h_vol) ?></td>
      <td><?=formatter($bitcoinPrice->bitcoin->usd_market_cap) ?></td>
       <td>Unknown</td>
       <td>Unknown</td>
       <td>Unknown</td>
    </tr>
     <tr>
      <td><img src="/img/pivx.png" width="15" height="15" title="Pivx logo" alt="Pivx logo" />   Pivx (PIVX)</td>
      <td>Unknown</td>
      <td>Unknown</td>
      <td><?=formatter($pivxPrice->pivx->usd) ?></td>
      <td><?=formatter($pivxPrice->pivx->usd_24h_change) ?></td>
      <td><?=formatter($pivxPrice->pivx->usd_24h_vol) ?></td>
      <td><?=formatter($pivxPrice->pivx->usd_market_cap) ?></td>
       <td>Unknown</td>
       <td>10,000</td>
       <td>1,536</td>
    </tr>
    <tr>
      <td><img src="/img/dash.png" width="15" height="15" title="Dash logo" alt="Dash logo" />    Dash (DASH)</td>
      <td>7.5%</td>
      <td>14,40 $</td>
      <td><?=formatter($dashPrice->dash->usd) ?></td>
      <td><?=formatter($dashPrice->dash->usd_24h_change) ?></td>
      <td><?=formatter($dashPrice->dash->usd_24h_vol) ?></td>
      <td><?=formatter($dashPrice->dash->usd_market_cap) ?></td>
      <td>$69,696.22</td>
      <td>1000</td>
      <td>4001</td>
    </tr>
    <tr>
      <td><img src="/img/ntx.png" width="15" height="15" title="Netchain logo" alt="Netchain logo" />    Netchain (NTX) </td>
      <td>350%</td>
      <td>0,12 $</td>
      <td>$0.00004</td>
      <td><?=formatter($netchainPrice->netchain->usd_24h_change) ?></td>
      <td><?=formatter($netchainPrice->netchain->usd_24h_vol) ?></td>
      <td><?=formatter($netchainPrice->netchain->usd_market_cap) ?></td>
      <td>$7</td>
      <td>100.000</td>
      <td>55</td>
    </tr>
      </tbody>
  <tfoot>
    <tr>
      <th>Coin name
      </th>
      <th>ROI
      </th>
      <th>Daily income
      </th>
      <th>Price 
      </th>
      <th>24 change 
      </th>
      <th>Volume
      </th>
      <th>Marketcap
      </th>
      <th>Node price
      </th>
      <th>Coins for MN
      </th>
      <th>Nodes
      </th>
    </tr>
  </tfoot>
</table>

  <!-- SCRIPTS -->
  <!-- JQuery -->
  <script type="text/javascript" src="js/jquery-3.4.1.min.js"></script>
  <!-- Bootstrap tooltips -->
  <script type="text/javascript" src="js/popper.min.js"></script>
  <!-- Bootstrap core JavaScript -->
  <script type="text/javascript" src="js/bootstrap.min.js"></script>
  <!-- MDB core JavaScript -->
  <script type="text/javascript" src="js/mdb.min.js"></script>
  <!-- MDBootstrap Datatables  -->
<script type="text/javascript" src="js/addons/datatables.min.js"></script>
<script>
$(document).ready(function () {
$('#dtBasicExample').DataTable();
$('.dataTables_length').addClass('bs-select');
setTimeout(function() {
    location.reload();
}, 900000);
});
</script>
</body>

</html>

 

I need section usd_24h_change in percent %.
How to do that?

I tryed :

<td><($bitcoinPrice->dash->usd_24h_change) ? % ></td> 
<td><($dashPrice->dash->usd_24h_change) ? % ></td> 
<td><($netchainPrice->dash->usd_24h_change) ? % ></td> 
<td><($pivxPrice->dash->usd_24h_change) ? % ></td> 

But it doesn´t work… Please help

Edited October 26, 2019 by Netchain

This topic has been moved to Application Design.

http://www.phpfreaks.com/forums/index.php?topic=353345.0

<?php
require_once('upper.php');
require_once('database.php');
echo $error_msg='';
if(isset($_POST['submit']))
{
$LoginId=mysqli_real_escape_string($dbc,trim($_POST['LoginId']));
$Password1=mysqli_real_escape_string($dbc,trim($_POST['Password1']));
$Password2=mysqli_real_escape_string($dbc,trim($_POST['Password2']));
$Name=mysqli_real_escape_string($dbc,trim($_POST['Name']));
$Age=mysqli_real_escape_string($dbc,trim($_POST['Age']));
$BloodGroup=mysqli_real_escape_string($dbc,trim($_POST['BloodGroup']));
if(!isset($_POST['Sex']))
{
echo 'Please enter Sex<br>';
}
else{
$Sex= mysqli_real_escape_string($dbc,trim($_POST['Sex']));
}
$Qualification=mysqli_real_escape_string($dbc,trim($_POST['Qualification']));
$ContactNumber=mysqli_real_escape_string($dbc,trim($_POST['ContactNumber']));
$Email=mysqli_real_escape_string($dbc,trim($_POST['Email']));
$Address=mysqli_real_escape_string($dbc,trim($_POST['Address']));
$AboutYourself=mysqli_real_escape_string($dbc,trim($_POST['AboutYourself']));
//$countCheck=count($_POST['checkbox']);
//echo $countCheck;
//$checkbox=$_POST['checkbox'];
//$countCheck=count($checkbox);
if(empty($LoginId)){echo 'Please enter Login Id';}
elseif(empty($Password1)){echo 'Please enter Password';}
elseif(empty($Password2)){echo 'Please confirm Password';}
elseif($Password1!==$Password2){echo 'Password didn\'t match';}
elseif(empty($Name)){echo 'Please enter Name';}
elseif(empty($Age)){echo 'Please enter Age';}
elseif(!isset($_POST['Sex'])){}
elseif(empty($Qualification)){echo 'Please enter Qualification';}
elseif(empty($ContactNumber)){echo 'Please enter Contact Number';}
elseif(empty($Email)){echo 'Please enter Email';}
elseif(empty($Address)){echo 'Please enter Address';}
elseif(empty($AboutYourself)){echo 'Please enter About Yourself';}
elseif(!isset($_POST['checkbox'])){ echo 'You have to register at least one activity.';}
elseif(!isset($_POST['TermsAndConditions'])){ echo 'You have to agree all Terms and Conditions of Elite Brigade.';}
else
{
require_once('database.php');
$query="select * from registration where LoginId='$LoginId'";
$result=mysqli_query($dbc,$query);
if(mysqli_num_rows($result)==0)
{
$checkbox=$_POST['checkbox'];
$countCheck=count($_POST['checkbox']);
$reg_id=' ';
for($i=0;$i<$countCheck;$i++)
{
$reg_id=$reg_id.$checkbox[$i].',';
$query="insert into activity_participation (LoginId,Title,Date) values ('$LoginId','$checkbox[$i]',CURDATE())";
$result=mysqli_query($dbc,$query) or die("Not Connected");
}
$query="insert into registration (LoginId,Password,Name,Age,BloodGroup,Sex,Qualification,ContactNumber,Email,Address,AboutYourself,Activity)values ('$LoginId'[B],SHA('$Password1'),[/B]'$Name','$Age','$BloodGroup','$Sex','$Qualification','$ContactNumber','$Email','$Address','$AboutYourself',',$reg_id')";
$result=mysqli_query($dbc,$query) or die("Not Connect");

echo ' Dear '.$Name.'.<br>Your request has been mailed to admin.<br>Your account is waiting for approval<br>';
$from= 'Elite Brigade';
$to='ankitp@rsquareonline.com';
$subject='New User Registration';
$message="Dear admin,\n\nA new user request for registration. Please check it out.\n\nRegards\nMicro";
mail($to,$subject,$message,'From:'.$from);
//header('Location: index.php');
// header('Location: Registration.php');
}
else
{
echo 'Dear '.$Name. ', <br> An account already exist with login-id<b> '.$LoginId.'</b> <br>Please try another login-id';
}}
}
?>

<html>
<head>
<script src="jquery-latest.js"></script>
  <script type="text/javascript" src="jquery-validate.js"></script>
<style type="text/css">
* { font-family: Verdana;  }

label.error {  color: white;  padding-left: .5em; }
p { clear: both; }
.submit { margin-left: 12em; }
em { font-weight: bold; padding-right: 1em; vertical-align: top; }
</style>
  <script>
  $(document).ready(function(){
    $("#commentForm").validate();
  });
  </script>
  
</head>

<body>

<?php
echo $error_msg; ?>

<form action='<?php echo $_SERVER['PHP_SELF'];?>' id="commentForm" method='post'>
<div class="registration_and_activity">

<table border="0" width="380">
<tr><td colspan="2">
<h3>New User?</h3></td></tr>
<tr><td width="120">

<em>*</em>Enter Login id</td><td width="150"><input type='text' name='LoginId'  minlength="4" value='<?php if(!empty($LoginId))echo $LoginId;?>' /></td></tr>
<tr><td>
<em>*</em>Enter Password</td> <td><head>
   <div id="divMayus" style="visibility:hidden">Caps Lock is on.</div>
   <SCRIPT language=Javascript>

function capLock(e){
 kc = e.keyCode?e.keyCode:e.which;
 sk = e.shiftKey?e.shiftKey:((kc == 16)?true:false);
 if(((kc >= 65 && kc <= 90) && !sk)||((kc >= 97 && kc <= 122) && sk))
  document.getElementById('divMayus').style.visibility = 'visible';
 else
  document.getElementById('divMayus').style.visibility = 'hidden';
}

</SCRIPT>
   </HEAD>
<input onkeypress='return capLock(event)' type='password' name='Password1' value='<?php if(!empty($Password1))echo $Password1;?>' /></td></tr>

<tr><td>
<em>*</em>Confirm Password</td><td><input type='password' name='Password2' value='<?php if(!empty($Password2))echo $Password2;?>' /></td></tr>
<tr><td width="120">
<em>*</em>Enter Name</td> <td><input type='text'  name='Name' value='<?php if(!empty($Name))echo $Name;?>' /></td></tr>
<tr><td>
<em>*</em>Enter Age</td><HEAD>
   <SCRIPT language=Javascript>
      
      function isNumberKey(evt)
      {
         var charCode = (evt.which) ? evt.which : event.keyCode
         if (charCode > 31 && (charCode < 48 || charCode > 57))
            return false;

         return true;
      }
  
  
     
   </SCRIPT>
   </HEAD>
<td><INPUT onkeypress='return isNumberKey(event)'  type='text' name='Age' value='<?php if(!empty($Age))echo $Age;?>'/></td></tr>

<tr><td>
<em>*</em>Enter Blood</td><td><input type='text' name='BloodGroup' value='<?php if(!empty($BloodGroup))echo $BloodGroup;?>' /></td></tr>

<tr><td>
<em>*</em>Enter Sex</td><td><input type='radio' name='Sex'  style='width:16px; border:0;' 'value='Male' />Male   <input type='radio' name='Sex' style='width:16px; border:0;' 'value='Female' />Female</td></tr>

<tr><td>
<em>*</em>Enter Qualification</td><td><input type='text' name='Qualification'  value='<?php if(!empty($Qualification))echo $Qualification;?>' /></td></tr>

<tr><td>
<em>*</em>Contact Number </td><td><input onkeypress='return isNumberKey(event)'type='text'  name='ContactNumber' value='<?php if(!empty($ContactNumber))echo $ContactNumber;?>' /></td></tr>

<tr><td>
<em>*</em>Enter Email</td><td><input type='text' name='Email'class="email" value='<?php if(!empty($Email))echo $Email;?>' /></td></tr>

<tr><td>
<em>*</em>Enter Address</td><td><input type='text'   name='Address' value='<?php if(!empty($Address))echo $Address;?>' /></td></tr>


<tr ><td >
<em>*</em>About Yourself </td></tr>
<tr><td colspan="2"><textarea rows='10' cols='40'  name='AboutYourself'  /><?php if(!empty($Address))echo $Address;?></textarea></td></tr>
<tr><td>

<?php echo"
<tr><td colspan='2'><em>*</em><b>Select fields for which you want to register</b></td></tr>";

require_once('database.php');
$query="select * from activity";
$result=mysqli_query($dbc,$query);
while($row=mysqli_fetch_array($result)){
$Title=$row['Title'];
$ActivityId=$row['ActivityId'];
echo "<tr><td>$Title</td>";
echo "<td><input type='checkbox' name='checkbox[]' value='$Title' style='width:14px; text-align:right;'/></td></tr>";//value=$ActivityId tells ActivityId variable extracts with name="checkbox"
echo "<br/>";
}
echo "<td><em>*</em><input type='checkbox' name='TermsAndConditions'  style='width:14px; text-align:right;'/></td><td> I agree all <a href='TermsAndConditions.php'>Terms and conditions </a>of Elite Brigade</td></tr>";
echo "<tr><td colspan='2' align='center'><input type='submit' value='Register' name='submit' style='background:url(./images/button_img2.png) no-repeat 10px 0px; width:100px; padding:3px 0 10px 0; color:#FEFBC4; border:0;'/></td></tr><br>";

echo " </td></tr></table>

</div>

</form>
</body>
</html>";
require_once('lower.php');

?>


Hi Friends ....
I encrypt user password by SHA('$Password') method but now i want to add "Forget Password Module" for which I need to decrypt it first before tell my user but I don't Know how to decrypt it.
Please help me........