php

include($DOCUMENT_ROOT . '/vars.php');
include($DOCUMENT_ROOT . '/headfoot.php');
mysql_connect($db_host, $db_user, $db_pwd);
mysql_select_db($db_name);
if ($form == 'sent' && ereg($self_name, $HTTP_REFERER) && !ereg('%', $email)) {
    $res = mysql_query("select passwd from user where email='$email'");
    if (mysql_num_rows($res) == 1) {
        $admail = mysql_result(mysql_query("select value from admin where field='email'"), 0);
        $passwd = mysql_result($res, 0);
        mail($email, "$title password reminder", "Your $title password is: $passwd\n\n$title Admin\nhttp://$siteurl/\n$admail", "From: \"$title Admin\" <$admail>");
    }
    header("Location: $self_url");
    exit;
}
uheader();
echo("<p align=center class=\"big\"><b><font face=$fontface>Lost your password?</font></b></p>\n");
echo("<p align=center><font face=$fontface size=2>Enter your e-mail address in the field below and press '<b>Send password</b>'.</font></p>");
echo("<p align=center><form action=/lost.php method=post><input type=hidden name=form value=sent><input type=text name=email><br><input type=submit value=\"Send password\"></form></p>");
ufooter();
mysql_close;