[WEB4LIB] Re: I Need a "forgot password" PHP script

[Shashi Pinheiro]

Randy,

Can you send it to me as well?

Hope all is well.

Shashi Pinheiro
UTSA Library
Systems Analyst
210 458 6133 (new)
shashi.pinheiro at utsa.edu (new)
http://www.lib.utsa.edu


-----Original Message-----
From: web4lib at webjunction.org
[mailto:web4lib at webjunction.org] On Behalf Of Randy Norwood
Sent: Monday, May 09, 2005 1:44 PM
To: Multiple recipients of list
Subject: [WEB4LIB] Re: I Need a "forgot password" PHP script 


I did one recently, and will send you the code separately. It checks
against a MySQL database that already contains the registration info for
the application. You could just as easily check against an user list in
a text file.

Before sending a new password (the passwords are hashed, so nobody,
including me, can recover them) the user is required to authenticate to
our campus single sign-on system. It seems like you will need to
authenticate the users somehow; otherwise it would be trivial to abuse.
Perhaps you could use a password reminder (name of your dog when you
were a child, etc).


-- 
~~~~~~~~~~~~~~~~~~~~~~~~~~~
Randy Norwood
Web  Manager
Texas Tech University Libraries
Office: 806-742-2238  x236
Fax: 806-742-8669
E-mail: randy.norwood at ttu.edu



On 05/09/05 1:20 PM, "David P. Moore" <mooredp at email.uah.edu> wrote:

> Is anyone aware of a PHP script/form that will send a user their 
> password upon matching their submitted email address against a flat 
> file of email addresses? I am aware of Perl scripts that do this but 
> not PHP. We have found a PHP script that will query a SQL database and

> do this, but this is not ideal for us.
> 
> Or perhaps there are other ways to do this?
> 
> Thanks for any thoughts.
> 
> David P. Moore
> Electronic Resources/Business Librarian
> M. Louis Salmon Library
> University of Alabama in Huntsville
> Huntsville, AL 35899
> 256-824-6285
> FAX: 256-824-6083
> david.moore at uah.edu
> http://www.uah.edu/library
> 
> 
>