Forgot Password Script PHP mysqli database

Question

Hi I am trying to make forgot password script and successfully completed but I am getting one problem. In forgot.php When user enter email, script checks the email

Answer 1

You need to change the action from resetpass.php to resetpass.php?code=

Otherwise the code gets lost when you submit the form.

For example: (Not bugfree!)

    

    
New Password:

    
    

But think about some things:

• Your Code is very unsecure, better try uniqid(rand());
• With this Code it is possible that two entries got the same code
• Somebody could try all code poosibilities