hii all.. i'm developing a secured system for resetting a forgotten password, in my first step, user has to enter his userID which will be validated with the DB and if it exists then he will be moved to the second step where he'll be asked more details and if they were also matched,. in the third step i need to send a dynamic URL to userID's email where by clicking that link, user will be shown a password update page.. can anyone please suggest me how to do this? i succeeded the above 2 steps.. i'm confused with the third step.. and DB contails 2 tables holding customer's data any help please.. as i need to deliver this by 2morrow.. the feature simply resembles www.ebay.in site's rest forgotten password feature. are there any php scripts available?
Make a random number, store it in the database in your users table, email it out to the user's address. When a click comes back to your password-reset script, if it has the random number in the GET argument, then you can go ahead and reset the password.