Forgot Password - Login Authentication


got any example of link how to do click forgot password and then reset password from that received link.

how about security issue on this matters.

i found few link its not fully working source code.

pls help me



If they forget password, your recovery page should let them put in there email address and possibly a security question or other token if you need more security.

If their info is valid you send them a link to your reset form. That link has a randomly generated key in it that you store in their user record. Compare the two and if good ley them reset.