PHP and MySQL Web Development 4th Ed-tqw-_darksiderg

Implementing User Authentication
591
Listing 27.16
Continued
set passwd = sha1('".$new_password."')
where username = '".$username."'");
if (!$result) {
throw new Exception('Password could not be changed.');
} else {
return true; // changed successfully
}
}
This function checks that the old password supplied was correct, using the login()
function that you have already looked at. If it’s correct, the function will connect to the
database and update the password to the new value.
Resetting Forgotten Passwords
In addition to changing passwords, you need to deal with the common situation in
which a user has forgotten her password. On the front page, login.php, you provide a
link, marked Forgotten your password?, for users in this situation.This link takes users
to the script called forgot_form.php, which uses the output functions to display a form,
as shown in Figure 27.8.
Figure 27.8 The forgot_form.php script supplies a form in which users
can ask to have their passwords reset and sent to them.