my script not running and i need help

[muchexie]

i have two scripts that are not running to reset a password that has been forgotten and the other to change old password.

here are the scripts.

change_passwd.p hp
[PHP]
session_start() ;
do_html_header( "Changing password");
//check_valid_use r();
$new_passwd=($_ POST['new_passwd']);
$new_passwd2=($ _POST['new_passwd2']);
if (!filled_out($H TTP_POST_VARS))
{
echo "You have not filled out the form completely.
Please try again.";
display_user_me nu();
//do_html_footer( );
exit;
}
else
{
if ($new_passwd!=$ new_passwd2)
echo "Passwords entered were not the same. Not changed.";
else if (strlen($new_pa sswd)>16 || strlen($new_pas swd)<6)
echo "New password must be between 6 and 16 characters. Try again.";
else
{
// attempt update
if (change_passwor d($valid_user, $old_passwd, $new_passwd))
echo "Password changed.";
else
echo "Password could not be changed.";
}


}
display_user_me nu();
//do_html_footer( );[/PHP]

error warnings from this code are.

Notice: Undefined index: new_passwd in C:\project\test \change_passwd. php on line 6

Notice: Undefined index: new_passwd2 in C:\project\test \change_passwd. php on line 7
New password must be between 6 and 16 characters. Try again.
Fatal error: Call to undefined function: display_user_me nu() in C:\project\test \change_passwd. php on line 33

[PHP]
function change_password ($username, $old_passwd, $new_passwd)
// change password for username/old_password to new_password
// return true or false
{
// if the old password is right
// change their password to new_password and return true
// else return false
if (login($usernam e, $old_passwd))
{
if (!($conn = db_connect()))
return false;
$result = mysql_query( "update users
set passwd = password('$new_ passwd')
where username = '$username'");
if (!$result)
return false; // not changed
else
return true; // changed successfully
}
else
return false; // old password was wrong
}

function get_random_word ($min_length, $max_length)
// grab a random word from dictionary between the two lengths
// and return it
{
// generate a random word
$word = "";
$dictionary = "/usr/share/dict/words"; // the ispell dictionary
$fp = fopen($dictiona ry, "r");
$size = filesize($dicti onary);

// go to a random location in dictionary
srand ((double) microtime() * 1000000);
$rand_location = rand(0, $size);
fseek($fp, $rand_location) ;

// get the next whole word of the right length in the file
while (strlen($word)< $min_length || strlen($word)>$ max_length)
{
if (feof($fp))
fseek($fp, 0); // if at end, go to start
$word = fgets($fp, 80); // skip first word as it could be partial
$word = fgets($fp, 80); // the potential password
};
$word=trim($wor d); // trim the trailing \n from fgets
return $word;
}
function reset_password( $username)
// set password for username to a random value
// return the new password or false on failure
{
// get a random dictionary word b/w 6 and 13 chars in length
$new_passwd = get_random_word (6, 13);

// add a number between 0 and 999 to it
// to make it a slightly better password
srand ((double) microtime() * 1000000);
$rand_number = rand(0, 999);
$new_passwd .= $rand_number;

// set user's password to this in database or return false
if (!($conn = db_connect()))
return false;
$result = mysql_query( "update users
set passwd = password('$new_ password')
where username = '$username'");
if (!$result)
return false; // not changed
else
return $new_passwd; // changed successfully
}

function notify_password ($username, $passwd)
// notify the user that their password has been changed
{
if (!($conn = db_connect()))
return false;
$result = mysql_query("se lect email from users
where username='$user name'");
if (!$result)
return false; // not changed
else if (mysql_num_rows ($result)==0)
return false; // username not in db
else
{
$email = mysql_result($r esult, 0, "email");
$from = "From: support@learnin g_system \r\n";
$mesg = "Your password has been changed to $password \r\n"
."Please change it next time you log in. \r\n";
if (mail($email, "Learning System login information", $mesg, $from))
return true;
else
return false;
}
}[/PHP]

hese are the errror warnings i got.

Warning: fopen(/usr/share/dict/words) [function.fopen]: failed to open stream: No such file or directory in C:\project\test \user_auth_fns. php on line 99

Warning: filesize() [function.filesi ze]: Stat failed for /usr/share/dict/words (errno=2 - No such file or directory) in C:\project\test \user_auth_fns. php on line 100

Warning: fseek(): supplied argument is not a valid stream resource in C:\project\test \user_auth_fns. php on line 105

Warning: feof(): supplied argument is not a valid stream resource in C:\project\test \user_auth_fns. php on line 110

Warning: fgets(): supplied argument is not a valid stream resource in C:\project\test \user_auth_fns. php on line 112

Warning: fgets(): supplied argument is not a valid stream resource in C:\project\test \user_auth_fns. php on line 113

------------------------------------------------------------------------------------------------------------------

yo help is greatly appreciated.

[cassbiz]

i have two scripts that are not running to reset a password that has been forgotten and the other to change old password.

here are the scripts.

change_passwd.p hp

session_start();
do_html_header("Changing password");
//check_valid_user();
$new_passwd=($_POST['new_passwd']);
$new_passwd2=($_POST['new_passwd2']);
if (!filled_out($HTTP_POST_VARS))
{
echo "You have not filled out the form completely.
Please try again.";
display_user_menu();
//do_html_footer(); 
exit;
}
else 
{
if ($new_passwd!=$new_passwd2)
echo "Passwords entered were not the same. Not changed.";
else if (strlen($new_passwd)>16 || strlen($new_passwd)<6)
echo "New password must be between 6 and 16 characters. Try again.";
else
{
// attempt update
if (change_password($valid_user, $old_passwd, $new_passwd))
echo "Password changed.";
else
echo "Password could not be changed.";
}


}
display_user_menu(); 
//do_html_footer();[/PHP]

error warnings from this code are.

Notice: Undefined index: new_passwd in C:\project\test\change_passwd.php on line 6

Notice: Undefined index: new_passwd2 in C:\project\test\change_passwd.php on line 7
New password must be between 6 and 16 characters. Try again.
Fatal error: Call to undefined function: display_user_menu() in C:\project\test\change_passwd.php on line 33

[PHP]
function change_password($username, $old_passwd, $new_passwd)
// change password for username/old_password to new_password
// return true or false
{
// if the old password is right 
// change their password to new_password and return true
// else return false
if (login($username, $old_passwd))
{
if (!($conn = db_connect()))
return false;
$result = mysql_query( "update users
set passwd = password('$new_passwd')
where username = '$username'");
if (!$result)
return false; // not changed
else
return true; // changed successfully
}
else
return false; // old password was wrong
}

function get_random_word($min_length, $max_length)
// grab a random word from dictionary between the two lengths
// and return it
{
// generate a random word
$word = "";
$dictionary = "/usr/share/dict/words"; // the ispell dictionary
$fp = fopen($dictionary, "r");
$size = filesize($dictionary);

// go to a random location in dictionary
srand ((double) microtime() * 1000000);
$rand_location = rand(0, $size);
fseek($fp, $rand_location);

// get the next whole word of the right length in the file
while (strlen($word)< $min_length || strlen($word)>$max_length) 
{ 
if (feof($fp)) 
fseek($fp, 0); // if at end, go to start
$word = fgets($fp, 80); // skip first word as it could be partial
$word = fgets($fp, 80); // the potential password
};
$word=trim($word); // trim the trailing \n from fgets
return $word; 
}
function reset_password($username)
// set password for username to a random value
// return the new password or false on failure
{ 
// get a random dictionary word b/w 6 and 13 chars in length
$new_passwd = get_random_word(6, 13);

// add a number between 0 and 999 to it
// to make it a slightly better password
srand ((double) microtime() * 1000000);
$rand_number = rand(0, 999); 
$new_passwd .= $rand_number;

// set user's password to this in database or return false
if (!($conn = db_connect()))
return false;
$result = mysql_query( "update users
set passwd = password('$new_password')
where username = '$username'");
if (!$result)
return false; // not changed
else
return $new_passwd; // changed successfully 
}

function notify_password($username, $passwd)
// notify the user that their password has been changed
{
if (!($conn = db_connect()))
return false;
$result = mysql_query("select email from users
where username='$username'");
if (!$result)
return false; // not changed
else if (mysql_num_rows($result)==0)
return false; // username not in db
else
{
$email = mysql_result($result, 0, "email");
$from = "From: support@learning_system \r\n";
$mesg = "Your password has been changed to $password \r\n"
."Please change it next time you log in. \r\n";
if (mail($email, "Learning System login information", $mesg, $from))
return true; 
else
return false; 
}
}

hese are the errror warnings i got.

Warning: fopen(/usr/share/dict/words) [function.fopen]: failed to open stream: No such file or directory in C:\project\test \user_auth_fns. php on line 99

Warning: filesize() [function.filesi ze]: Stat failed for /usr/share/dict/words (errno=2 - No such file or directory) in C:\project\test \user_auth_fns. php on line 100

Warning: fseek(): supplied argument is not a valid stream resource in C:\project\test \user_auth_fns. php on line 105

Warning: feof(): supplied argument is not a valid stream resource in C:\project\test \user_auth_fns. php on line 110

Warning: fgets(): supplied argument is not a valid stream resource in C:\project\test \user_auth_fns. php on line 112

Warning: fgets(): supplied argument is not a valid stream resource in C:\project\test \user_auth_fns. php on line 113

------------------------------------------------------------------------------------------------------------------

yo help is greatly appreciated.

I will try to help here, but I myself am not an expert.

In regards to your dictionary, check your path to make sure that it is indeed there. Since I have not done any php on a Windows box I noticed that you are calling the dictionary with the forward slash /

$HTTP_POST_VARS should be be $_POST

That is all I see right now.

Good Luck

[muchexie]

I will try to help here, but I myself am not an expert.

In regards to your dictionary, check your path to make sure that it is indeed there. Since I have not done any php on a Windows box I noticed that you are calling the dictionary with the forward slash /

$HTTP_POST_VARS should be be $_POST

That is all I see right now.

Good Luck

Its true that there is need to check the path but however it seems as if that Windows does not support the dictionary so I'm trying to down it but seems not to be working.I would appreciate if you can help me alternatively to come up with a function that generates a new password.