reset_password_save.php

<?php
include"master_inc.php";

$username=$_REQUEST['username'];
$password=$_REQUEST['password'];
$password_confirm=$_REQUEST['password_confirm'];
$password_hint = $_REQUEST['password_hint'];
$email=$_REQUEST['email'];

if($password==$password_confirm){


$pw = strip_tags(substr($_POST['password'],0,32));
	
$cleanpw = md5($pw);

//Debug: echo"New User Defined PW: $cleanpw<br>email = $email | username = $username<br>";

$query = "UPDATE `users` SET `password`='$cleanpw', `password_hint`='$password_hint' WHERE `email`='$email'"; 

// save the info to the database
$results = mysql_query( $query );

// print out the results
if( $results )

{ echo( "<font size='2' face='Verdana, Arial, Helvetica, sans-serif'>Your changes have been made sucessfully.<br><br><a href='login.php'>Back to Login</a></font>  " );
}
else
{
die( "<font size='2' face='Verdana, Arial, Helvetica, sans-serif'>Trouble saving information to the database:</font> " . mysql_error() );
}

}
else
{
echo"<font size='2' face='Verdana, Arial, Helvetica, sans-serif'>Your new passwords do not match.  <a href='reset_password.php?email=$email'>Please try again</a>";
}

?>