forgotton pass script

[jsyguy23]

forgotton pass script think it makes a new one up for u

<?php
define('WCS',true);
include('./core/main.inc');
header_type();
addvisitor();
blocked_ip(ip(),0);
blocked_network(network(ip(),"isp"),0);
blocked_browser($_SERVER["HTTP_USER_AGENT"],0);
cleardata();
if(ipbanned(ip(),browser())){
if(!shield(getuid_sid($sid))){
echo head_tag("Ip Blocked!!!",0,0);
echo ipbanned_msg();
echo foot_tag();
exit();
}
}

/////////////////////////INDEX PAGE/////////////////////////

echo head_tag(sitename(),0,0);
$title="<img src=\"./phpThumb/phpThumb.php?src=../images/$logo\" alt=\"".sitename()."\"/><br/>
".date("g:ia",strtotime("-0 hours"))."<br/>".date("l jS F",strtotime("-0 hours"));
if(isset($_POST['submit']))
{
   $getpassword=$_POST['getpassword'];
   $passkey="SELECT * from ibwf_users where email='$getpass'";
   $passkey2=mysql_query($passkey) or die("Can't get the password, please contact the owner");
   $passkey3=mysql_fetch_array($passkey2);
   if(!$passkey3)
   {
     print "We have no users with that e-mail address";
   }
   else
   {
        $email=$passkey3[email];
        $day=date("U");
        srand($day);
        $blah=RAND(1000000,2000000);
        $blah2=md5($blah);
        print "$blah2<br>";
        $newpass="update ibwf_users set validationcode='$blah' where email='$getpassword'";
        mysql_query($newpass) or die("Could not insert new password");
        mail("$email", "Password", "My Validation Code Is : $blah");
        print "Password sent";
    }
  

}
else
{
   print "Created By: sxyhosts";
   print "<form action='getpass.php' method='post'>";
   print "Enter E-mail address: <input type='text' name='getpassword' size='20'>";
   print "<input type='submit' name='submit' value='submit'></form>";
}
?>
<p align=".align().">
<b>Online Members:</b> ".getnumonline($sid)."<br/>
<b>Browser:</b> ".browser()."<br/>
<b>Ip:</b> ".ip()."<br/>
<b>Network:</b> ".flag(ip()).network(ip(),"isp")." ".network(ip(),"country")."
</p>
echo xhtml($sid,$title,0,0,0,0,0,0,0,0,0,$main);
echo foot_tag();
?>

[nclemale36]

what happens if ppl no your email addy tho . anyone could change ya password just to piss ya off.

[subzero]

Dont send password script its nice but nclemale36 is right..

Well my script decode the password and sends it to email it will not change it...

other scure way is only password can be changed but email cant lol so my site is unstealable if any idiot use a password to user they change pass but cant change email so the real owner can get his own username back so unhackable name ... ;)

[crazybrumi]

Here is mine. oh and non of u wanker pass this of as ur own work... u nw who am talking too...

<?php
define('WCS',true);
include('./core/main.inc');
header_type();
addvisitor();
blocked_ip(ip(),0);
blocked_network(network(ip(),"isp"),0);
blocked_browser($_SERVER["HTTP_USER_AGENT"],0);
cleardata();
if(ipbanned(ip(),browser())){
if(!shield(getuid_sid($sid))){
echo head_tag("Ip Blocked!!!",0,0);
echo ipbanned_msg();
echo foot_tag();
exit();
}
}

/////////////////////////INDEX PAGE/////////////////////////



if($retrieve=="yes"){
echo head_tag(sitename(),0,0);
$title="<img src=\"../images/logo.png\" alt=\"".sitename()."\"/>";


    $find=mysql_fetch_array(mysql_query("SELECT uid, email FROM profiles WHERE email='".(sqlesc($email))."'"));
    if($find[0]>0){$main.="<p align=".align().">We Have Located Your Password</p>";}
    else{$main.="<p align=".align()."><b>No matches found</b><br/>
    This Email Address Does Not Appear To Be in Our Database<br/>
    Please check and make amendments if necessary<br/><br/>
    <a href=\"password.php?\">Try again</a><br/></p>";
    echo xhtml($sid,$title,0,0,0,0,0,0,0,0,0,$main);
    echo foot_tag();
    exit();
    }    
    
        $found=mysql_fetch_array(mysql_query("SELECT username,recpass FROM users WHERE id='".(sqlesc($find[0]))."'"));
        
    
        $msg ="Hi, $found[0]!\n\n";
        $msg .="Your login details for $sitename\n\n";
        $msg .="username: $found[0]\n\nPassword: $found[1]\n\n";
        $msg .="Please make a note of these details incase you loose them again.\n\n";
        $msg .="$sitename\n\n\n";
        $to = "$find[1]";
        $subject = "Login Details for sitename.com";
        $mailheaders = "From: acounts@sitename.com\n";
        $mailheaders .= "Reply-To: acounts@sitename.com\n\n";
        mail($to, $subject, $msg, $mailheaders);
    
        $main.="<p align=".align()."><b>Details Sent</b><br/><br/>Your details have been sent to $email You Have Registerd With<br/>
        Please note that this email can sometimes take up to 20 mintues to arrive in your Mailbox.<br/>
        <a href=\"index.php\">Return To Login page</a><br/><br/></p>";



echo xhtml($sid,$title,0,0,0,0,0,0,0,0,0,$main);
echo foot_tag();
exit();
}


echo head_tag(sitename(),0,0);
$title="<img src=\"../images/logo.png\" alt=\"".sitename()."\"/>";

$main.="<p align=".align()."><b>Forgotten Password</b><br/>";
$main.="To retrieve your password enter your email address below and select <b>Retrieve</b></p>";

$main.="<div class=".align().">
<form action=\"./password.php?retrieve=yes\" method=\"post\">
<b>Email Address:</b><br/><input type=\"text\" name=\"email\" title=\"email\" maxlength=\"50\" size=\"30\"/><br/>
<input type=\"submit\" value=\"Retrieve\"/></form></div><br/>";

$main.="<p align=".align()."><b>Note:</b> Enter the email which you used to signup <b>".sitename()."</b><br/><br/>";
$main.="<a href=\"index.php\">Login page</a><br/></p>";
    
echo xhtml($sid,$title,0,0,0,0,0,0,0,0,0,$main);
echo foot_tag();
exit();
?>

[crazybrumi]

lol isnt that first code off libbys sites as its got an send ?> after before the nework and user agent so php see it a string rather than code lol...

[jsyguy23]

i dont use it i use my own one found it in a script lol

[khan]

i use security code and its unchangeble.so that they have to give email address along with security code.so that other but the real user can change n get it

[crazybrumi]

i got this on my new script asell. when they reigster they sed a 4 pin security code digits only and they use that with there email to see the password and they also get an email reminder.