[WEB4LIB] I Need a "forgot password" PHP script

[Randy Norwood]

I did one recently, and will send you the code separately. It checks against
a MySQL database that already contains the registration info for the
application. You could just as easily check against an user list in a text
file.

Before sending a new password (the passwords are hashed, so nobody,
including me, can recover them) the user is required to authenticate to our
campus single sign-on system. It seems like you will need to authenticate
the users somehow; otherwise it would be trivial to abuse. Perhaps you could
use a password reminder (name of your dog when you were a child, etc).


-- 
~~~~~~~~~~~~~~~~~~~~~~~~~~~
Randy Norwood
Web  Manager
Texas Tech University Libraries
Office: 806-742-2238  x236
Fax: 806-742-8669
E-mail: randy.norwood at ttu.edu



On 05/09/05 1:20 PM, "David P. Moore" <mooredp at email.uah.edu> wrote:

> Is anyone aware of a PHP script/form that will send a user their password
> upon matching their submitted email address against a flat file of email
> addresses? I am aware of Perl scripts that do this but not PHP. We have
> found a PHP script that will query a SQL database and do this, but this is
> not ideal for us.
> 
> Or perhaps there are other ways to do this?
> 
> Thanks for any thoughts.
> 
> David P. Moore
> Electronic Resources/Business Librarian
> M. Louis Salmon Library
> University of Alabama in Huntsville
> Huntsville, AL 35899
> 256-824-6285
> FAX: 256-824-6083
> david.moore at uah.edu
> http://www.uah.edu/library
> 
> 
>