Use Dreamweaver Log In To use for recordset PHP

Question

Hi I have gone through the tutorials on lost password
recovery for dreamweaver, but wondering if I can use the login
behaviour to do this.
Would it simply be this:
$loginFoundUser = "";
$message = "";
$from = "here is your [email protected]";
$headers = "From: $from";
if (isset($_POST['reg_username'])) {
$loginFoundUser = (get_magic_quotes_gpc()) ?
$_POST['reg_username'] : addslashes($_POST['reg_username']);
mysql_select_db($database_config, $config);
$LoginRS__query=sprintf("SELECT reg_username, reg_password
FROM regid WHERE reg_username='%s' AND reg_password='%s'",
get_magic_quotes_gpc() ? $loginUsername :
addslashes($loginUsername), get_magic_quotes_gpc() ? $password :
addslashes($password));
$LoginRS = mysql_query($LoginRS__query, $config) or
die(mysql_error());
$loginFoundUser = mysql_num_rows($LoginRS);
if ($loginFoundUser) {
$loginStrGroup = "";
&& ($loginFoundUser> 0) {
mail($loginFoundUser['reg_username'],"Your password","Your
password is:
".$loginFoundUser['reg_password'],$headers);
$message = "Your password has been e-mailed to you";
} else {
$message = "Sorry, the e-mail address you supplied is not in
our database";

Answer 1

jjjhbj111 wrote:
> Would I be best doing a recordset that is basically
searching the database:
> SELECT reg_username, reg_password FROM regid WHERE
reg_username =
> 'varUsername' LIMIT 1;
> and have a variable where varUsername =
$GET['MM_Username'];
A little knowledge is a dangerous thing. It seems as though
you have
some knowledge of how PHP works, but not yet enough to be
able to adapt
Dreamweaver code to your own requirements. For one thing, it
should be
$_GET, not $GET. The other thing is that MM_Username is a
variable that
Dreamweaver creates after searching the database.
Rather than attempting to hack the Log In User server
behavior, you
would be much better off using an ordinary recordset to get
the
information that you want. I also think it's rather dangerous
to send
out someone's password without first checking the email
address of the
person requesting it. You might also want to employ the
common technique
of asking for the answer to a security question, such as
mother's maiden
name, date of birth, favourite food, or something similar.
Create a form that collects username, email address, and
optionally a
the answer to a security question. Use the post method to
submit the
form and build a query in the Advanced Recordset dialog box
using
variables to get the values of $_POST['username'],
$_POST['email'],
$POST['security_answer']. Recordsets automatically create a
variable
that begins with $totalRows_ followed by the recordset name.
If that
variable is greater than 0, send the email. The password will
be in
$row_recordsetName['reg_password'] (change recordsetName to
the actual
name of the recordset).
David Powers, Adobe Community Expert
Author, "Foundation PHP for Dreamweaver 8" (friends of ED)
Author, "PHP Solutions" (friends of ED)
http://foundationphp.com/