839Chapter 44User Authentication

Request new password Forgot your password? Don t worry — simply enter youremail address below, and we will email you a new password. Please use the email address you provided when you registered. If you ve forgotten, you can always register again. Email:

EOFORMSTR; echo $form_str; ?> Figure 44-3 shows the Forgot Password form in action. Changing sensitive user dataYou probably want a little bit more security before you let users go changing their e-mailaddresses and passwords like, for instance, making extra sure they know the old passwordfirst. This is especially important if you use cookies with very long expiration times. It s eas- ier to manage this extra verification if you have a separate form for e-mail and passwordchanges, versus nonsensitive data, such as homepage or sig. If you don t collect usernames on your site, and instead use e-mail addresses as unique- identifying cookies, you will have to reset the cookies when you allow the user to changeane-mail address. Otherwise, your whole user-authentication scheme will no longer workproperly. Listing 44-7 is called emailpass_funcs.inc. It contains functions related to changing e-mailor password.
You need excellent and relaible webhost company to host your web applications? Then pay a visit to Inexpensive Web Hosting services.

This entry was posted on Saturday, February 16th, 2008 at 11:25 am and is filed under Domain. You can follow any responses to this entry through the RSS 2.0 feed. You can leave a response, or trackback from your own site.