PHP and MySQL Web Development 4th Ed-tqw-_darksiderg

Implementing User Authentication
593
Listing 27.18
Continued
$new_password .= $rand_number;
// set user's password to this in database or return false
$conn = db_connect();
$result = $conn->query("update user
set passwd = sha1('".$new_password."')
where username = '".$username."'");
if (!$result) {
throw new Exception('Could not change password.'); // not changed
} else {
return $new_password; // changed successfully
}
}
The reset_password() function generates its random password by getting a random
word from a dictionary, using the get_random_word() function and suffixing it with a
random number between 0 and 999.The get_random_word() function, shown in
Listing 27.19, is also in the user_auth_fns.php library.
Listing 27.19 get_random_word()Function from user_auth_fns.php—This
Function Gets a Random Word from the Dictionary for Use in Generating Passwords
function get_random_word($min_length, $max_length) {
// grab a random word from dictionary between the two lengths
// and return it
// generate a random word
$word = '';
// remember to change this path to suit your system
$dictionary = '/usr/dict/words'; // the ispell dictionary
$fp = @fopen($dictionary, 'r');
if(!$fp) {
return false;
}
$size = filesize($dictionary);
// go to a random location in dictionary
$rand_location = rand(0, $size);
fseek($fp, $rand_location);
// get the next whole word of the right length in the file
while ((strlen($word) < $min_length) || (strlen($word)>$max_length) ||
(strstr($word, "'"))) {
if (feof($fp)) {
fseek($fp, 0); // if at end, go to start