Userlib - User Library

[eluser]Christian Land[/eluser]
Btw. handling the "Forgot Password" function like you do is an open invitation for troublemakers... store the new password in an additional field and don't overwrite the old one until the user logs himself in with the new password - otherwise, somebody could abuse your "forget password" function to render all logins of a site useless until their resprective owners have read the mail (just imagine a simple script that scans your site for usernames and then invokes your forget password page with all found usernames)