Urgent Help Needed!

Hi fellows!
I really need some help badly. I have a page where user login to update their profile and also if they forgot their password, they input their password and it send the user a random password and also change that to the database. Everything was working fine until now, all of a sudden user can not login anymore and user can not get the new password if they click on forgot password. In both cases I found that for some reason whatever user type for login - userid and for forgot password email , it can not read that so it message out wrong userid and password / or email address it is not correct though all of them are correct. If anyone have any idea what might be the problem would really appreciate it. Just to let you know user can sign up no problem.

is there any error message or something, or can u post the link that gives u error ?

__________________

Designing For Communicating

Website : http://www.datisdesign.com
Weblog : http://blog.datisdesign.com

Well, it does not pass the following code no mater what it is....

PHP: Select all

$email=mysql_real_escape_string($email);
$status = "OK";
$msg="";
//error_reporting(E_ERROR | E_PARSE | E_CORE_ERROR);
if (!stristr($email,"@") OR !stristr($email,".")) {
$msg="Your email address is not correct<BR>"; 
$status= "NOTOK";} 

try this code :

PHP: Select all

<?php
if(!eregi("^[_a-z0-9-]+(\.[_a-z0-9-]+)*@[a-z0-9-]+(\.[a-z0-9-]+)*(\.[a-z]{2,3})$", $email)) {            
        $msg = "Please enter the proper email address !";
        $status= "NOTOK";
        } else {
            $status = "OK";
            $msg="";
        }
?>

__________________

Designing For Communicating

Website : http://www.datisdesign.com
Weblog : http://blog.datisdesign.com

I don't know if this will help you but I have a function to check email address

PHP: Select all

function check_email_address($email) { 
    // First, we check that there's one @ symbol, and that the lengths are right 
    if (!ereg("^[^@]{1,64}@[^@]{1,255}$", $email)) { 
    // Email invalid because wrong number of characters in one section, or wrong number of @ symbols. 
    return false; 
    } 
    // Split it into sections to make life easier 
    $email_array = explode("@", $email); 
    $local_array = explode(".", $email_array[0]); 
    for ($i = 0; $i < sizeof($local_array); $i++) { 
    if (!ereg("^(([A-Za-z0-9!#$%&'*+/=?^_`{|}~-][A-Za-z0-9!#$%&'*+/=?^_`{|}~\.-]{0,63})|(\"[^(\\|\")]{0,62}\"))$", $local_array[$i])) { 
        return false; 
        } 
    } 
    if (!ereg("^\[?[0-9\.]+\]?$", $email_array[1])) { // Check if domain is IP. If not, it should be valid domain name 
    $domain_array = explode(".", $email_array[1]); 
    if (sizeof($domain_array) < 2) { 
        return false; // Not enough parts to domain 
        } 
        for ($i = 0; $i < sizeof($domain_array); $i++) { 
              if (!ereg("^(([A-Za-z0-9][A-Za-z0-9-]{0,61}[A-Za-z0-9])|([A-Za-z0-9]+))$", $domain_array[$i])) { 
            return false; 
              } 
         } 
    } 
    return true; 
} 

and to use it in your code you would do

PHP: Select all

$email=mysql_real_escape_string($email);
$status = "OK";
$msg="";
//error_reporting(E_ERROR | E_PARSE | E_CORE_ERROR);
if(!check_email_address($email)) {
$msg="Your email address is not correct<BR>"; 
$status= "NOTOK";} 

I tried marsoul solutions I still got the message " Enter the proper email address" and I tried AdRock Solution and I still get the message "Your email address is not correct". I wonder if anything got change in the mysql server so that $email=mysql_real_escape_string($email); can not run anymore?
or do you think the part got hacked some how. Just to remind you that everything was running fine just day ago.

it seems the problem is before checking the email address, how do u pass the email to the code ?

__________________

Designing For Communicating

Website : http://www.datisdesign.com
Weblog : http://blog.datisdesign.com

Here is my forgot password form page and 2nd one is the process page

PHP: Select all

<?
//this is a .php file
?>
<!doctype html public "-//w3c//dtd html 3.2//en">
<html>
<head>
<title>(Type a title for your page here)</title>
<meta name="GENERATOR" content="Arachnophilia 4.0">
<meta name="FORMATTER" content="Arachnophilia 4.0">
</head>
<body>
<style>
body
{
background-attachment: fixed;
background-image: url("../images/waterm.gif");
background-repeat: no-repeat;
background-position: center center

}
</style>
<p>&nbsp;</p>
<p>&nbsp;</p>
<p>&nbsp;</p>
<p>&nbsp;</p>
<p>&nbsp;</p>
<form action='forgot-passwordck.php' method=post>
<table border='0' cellspacing='0' cellpadding='0' align=center>
 <tr bgcolor='#f1f1f1' > <td colspan='2' align='center'><font face='verdana, arial, helvetica' size='2' align='center'>&nbsp;Forgot Password ?<BR>Enter your email address</font></td> </tr>
  <tr bgcolor='#ffffff'> <td><font face='verdana, arial, helvetica' size='2' align='center'>  &nbsp;Email  &nbsp; &nbsp;
</font></td> <td  align='center'><font face='verdana, arial, helvetica' size='2' >
<input type ='text' class='bginput' name='email' ></font></td></tr>

<tr bgcolor='#f1f1f1'> <td  colspan='2' align='center'><font face='verdana, arial, helvetica' size='2' align='center'>  
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;  
<input type='submit' value='Submit'> <input type='reset' value='Reset'>
</font></td> </tr>
<tr> <td bgcolor='#ffffff' ><font face='verdana, arial, helvetica' size='2' align='center'> &nbsp;<a href=login.php>Login</a></font></td> <td bgcolor='#ffffff' align='center'><font face='verdana, arial, helvetica' size='2' ><a href='register.html'>New Member Sign UP</a></font></td></tr>
 
</table></center></form>

</body>
</html>

And here is the process file

PHP: Select all

<?
//*****************************************
include "session.php";
include "***.php"; // database connection details stored here
//////////////////////////////
?>
<!doctype html public "-//w3c//dtd html 3.2//en">
<html>
<head>
<title>**********</title>
<meta name="GENERATOR" content="Arachnophilia 4.0">
<meta name="FORMATTER" content="Arachnophilia 4.0">
</head>
<body>
<style>
body
{
background-attachment: fixed;
background-image: url("../images/waterm.gif");
background-repeat: no-repeat;
background-position: center center

}
</style>
<p>&nbsp;</p>
<p>&nbsp;</p>
<p>&nbsp;</p>
<p>&nbsp;</p>
<?php
$email=mysql_real_escape_string($email);
$status = "OK";
$msg="";
//error_reporting(E_ERROR | E_PARSE | E_CORE_ERROR);
if (!stristr($email,"@") OR !stristr($email,".")) {
$msg="Your email address is not correct<BR>"; 
$status= "NOTOK";}

echo "<br><br>";
if($status=="OK"){  $query="SELECT userid,password FROM tbl_login WHERE tbl_login.userid = '$email'";
$st=mysql_query($query);
 $recs=mysql_num_rows($st);
$row=mysql_fetch_object($st);
$em=$row->userid;// email is stored to a variable
 if ($recs == 0) {  echo "<center><font face='Verdana' size='2' color=red><b>No Password</b><br> Sorry Your address is not there in our database <br>You can signup and login to use our site. <BR><BR><a href='register.html'> Sign UP </a> </center>"; exit;}
////////////////////////////////////////////////////////////
function makeRandomPassword() { 
          $salt = "abchefghjkmnpqrstuvwxyz0123456789"; 
          srand((double)microtime()*1000000);  
          $i = 0; 
          while ($i <= 7) { 
                $num = rand() % 33; 
                $tmp = substr($salt, $num, 1); 
                $pass = $pass . $tmp; 
                $i++; 
          } 
          return $pass; 
    } 
    $random_password = makeRandomPassword(); 
    $db_password = md5($random_password); 
     
    $sql = mysql_query("UPDATE tbl_login SET password='$db_password'  
                WHERE userid='$email'"); 
     $subject = "Your password at domainname"; 
    $message = "Hi, we have reset your password. 
     
    New Password: $random_password 
     
    http://www.*****.com
    Once logged in you can change your password
/////////////////////////////////////////////////////
    Thanks! 
    Site admin 
     
    This is an automated response, please do not reply!";
     
    mail($email, $subject, $message, "From:www.******.com 
Webmaster<admin@*********.com>\n 
        X-Mailer: PHP/" . phpversion()); 
       echo "<center><font face='Verdana' size='3'> Your password has been sent!<br>Please check your e-mail!<br />"; 
   echo "<br><br>Click <a href='http://www.*********.com/login.php'>here</a> to login</font></center>";
 } 
 else {echo "<center><font face='Verdana' size='2' color=red >$msg <br><br><input type='button' value='Retry' onClick='history.go(-1)'></center></font>";}
?>
</body>
</html>

In you html page you need this

[html]<form action='forgot-passwordck.php' method='post'>[/HTML

in the php file try replacing

PHP: Select all

$email=mysql_real_escape_string($email); 

with this

PHP: Select all

$email = mysql_real_escape_string($_POST['email']);