recupero password

fre2004

recupero password

salve,

devo realizzare la classica paginetta per il recupero password.

ma il codice, ha qualcosa che non va, visto che le email non arrivano.

poi volevo cheidervi, eventuali misure di sicurezza da aggiungere, tipo email criptate.

un aiuto, grassssie!!!

<?php require('Connections/xxx.php'); ?>

<?php
mysql_select_db($database_gcv, $gcv);
$query_Recordset1 = "SELECT password FROM `user` WHERE username = '$_POST[username]'";
$Recordset1 = mysql_query($query_Recordset1, $gcv) or die(mysql_error());
$row_Recordset1 = mysql_fetch_assoc($Recordset1);
$totalRows_Recordset1 = mysql_num_rows($Recordset1);
mysql_select_db($database_gcv, $gcv);
$query_Recordset2 = "SELECT email FROM `user` WHERE username = '$_POST[username]'";
$Recordset2 = mysql_query($query_Recordset2, $gcv) or die(mysql_error());
$row_Recordset2 = mysql_fetch_assoc($Recordset2);
$totalRows_Recordset2 = mysql_num_rows($Recordset2);
 
//varie info per email
$oggi = date("j F Y G:i");
$ip = "$_SERVER[REMOTE_ADDR]";
$soggetto = "pass";
$to ="$Recordset2"
$body = "Ecco i tuoi dati: \nPassword: $Recordset1   \nUsername: $_POST[username]";
mail("$to","$soggetto","$body");
header ("Location: http://xxxxxxx.com/successo.php");
?>

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1" />
<title>Documento senza titolo</title>
</head>
<body>
</body>
</html>
<?php
mysql_free_result($Recordset1);
mysql_free_result($Recordset2);
?>

probid

<?php
require('Connections/xxx.php');
mysql_select_db($database_gcv, $gcv);
$Recordset = mysql_fetch_assoc(mysql_query("SELECT password,email FROM user WHERE username = stripslashes(addslashes($_POST[username]))))
) or die(mysql_error());

//varie info per email
$oggi = date("j F Y G:i");
$ip = $_SERVER[REMOTE_ADDR];
$soggetto = "pass";
$to=$Recordset[email];
$body = "'Ecco i tuoi dati: \n Password:'.$Recordset[password].
'\nUsername:'. $_POST[username]";
mail($to,$soggetto,$body);
sleep(1);
header ("Location: http://xxxxxxx.com/successo.php");
mysql_free_result($Recordset1);
mysql_free_result($Recordset2);
?>

fre2004

ho provato, ma da questo errore,

Parse error: parse error, unexpected T_STRING in /var/www/vhosts/lnx.xxxx.com/httpdocs/restore-password.php on line 10