PHP. Reset/Generate Password - Blank Password

[dummie84]

Ok- I've been trying to figure out where to put the generating function in the php file. So far, it is not generating a new password when a user request it. Not sure if the function generateRandpassword is not working or something missing?

1) user type/enter the email address in request form
2) if not found, then stop
3) if found in mysql database email field, then generate a new password
4) update user password field with new password
5) email the new password to the user email address

User get an email like this:

************************************************** ********
THIS IS AN AUTOMATED EMAIL - PLEASE DO NOT REPLY.
************************************************** ********


Hi!

You or someone requested for a new password. Here are your seller login infos at sitename.com
Your Username: test123
Your Password:

sitename
http://www.sitename.com

IP Address: xx.xxx.xxx.xx

PHP Code:

<?php
 $email = mysql_real_escape_string($_POST['email']);
 $ip=$_SERVER['REMOTE_ADDR'];
 
 if (isset($reminder)){
 $eredm = mysql_query("SELECT * FROM `sellers` WHERE memail='$email'") or die(mysql_error());
 if (mysql_num_rows($eredm)==0){
  print("<center><font color=darkred><b>Not found.</b></font></center>");
 } else {
  extract(mysql_fetch_array($eredm));
  
  // EXAMPLES: http://www.codemiles.com/php-tutorials/generate-password-using-php-t3120.html
  // http://wiki.jumba.com.au/wiki/PHP_Generate_random_password

  // CREATE RANDOM PASSWORD START
  function generateRandpassword($size=8, $power=0) {
    $vowels = 'aeuy';
    $randconstant = 'bdghjmnpqrstvz';
    if ($power & 1) {
        $randconstant .= 'BDGHJLMNPQRSTVWXZ';
    }
    if ($power & 2) {
        $vowels .= "AEUY";
    }
    if ($power & 4) {
        $randconstant .= '23456789';
    }
    if ($power & 8) {
        $randconstant .= '@#$%';
    }

    $newRandpassword = '';
    $alt = time() % 2;
    for ($i = 0; $i < $size; $i++) {
        if ($alt == 1) {
            $newRandpassword .= $randconstant[(rand() % strlen($randconstant))];
            $alt = 0;
        } else {
            $newRandpassword .= $vowels[(rand() % strlen($vowels))];
            $alt = 1;
        }
    }
    return $newRandpassword;
    
    $eredm = mysql_query("UPDATE sellers SET passwd=('$newRandpassword') WHERE memail='$email'") or die(mysql_error());
    //return $newRandpassword;
    //return $newRandpassword = mysql_query("UPDATE sellers SET passwd=('$newRandpassword') WHERE memail='$email'") or die(mysql_error());
  //$eredm = mysql_query("UPDATE sellers SET passwd=('$newRandpassword') WHERE memail='$email'") or die(mysql_error());
 }
  // CREATE RANDOM PASSWORD END
  
  $cont="**********************************************************\nTHIS IS AN AUTOMATED EMAIL - PLEASE DO NOT REPLY.\n**********************************************************\n\n\nHi! \n\nYou or someone requested for a new password. Here are your seller login infos at $sitename.com \nYour Username: $userne \nYour Password: $passwd \n\n$sitename \n$siteurl \n\nIP Address: $ip";
  $headers = "From: $sitename <pwd_robot@$sitename.com>\n";
  @mail($email,"Lost $sitename Seller Account Details.",$cont,$headers);
  print("<center><font color=darkgreen><b>An email has been sent.</b></font></center>");
 }
 }
?>

Normally I'd figure out what the problem through trials and errors but I'm lost.