PHP會員找回密碼功能實現實例介紹

2024-05-04 21:47:31

字體：大中小

來源：轉載

供稿：網友

如果你做的網站有會員系統那必須就自動找回密碼功能了,也就是忘記密碼功能,如果用戶忘記了密碼可以通過郵箱或手機號直接找回密碼,下面我來介紹郵箱找回密碼方法。

設置思路

1、用戶注冊時需要提供一個E-MAIL郵箱，目的就是用該郵箱找回密碼。

2、當用戶忘記密碼或用戶名時，點擊登錄頁面的“找回密碼”超鏈接，打開表單，并輸入注冊用的E-MAIL郵箱，提交。

3、系統通過該郵箱，從數據庫中查找到該用戶信息，并更新該用戶的密碼為一個臨時密碼（比如：12345678）。

4、系統借助Jmail功能把該用戶的信息發送到該用戶的郵箱中（內容包括：用戶名、臨時密碼、提醒用戶及時修改臨時密碼的提示語）。

5、用戶用臨時密碼即可登錄。

HTML,我們在找回密碼的頁面上放置一個要求用戶輸入注冊時所用的郵箱,然后提交前臺js來處理交互,代碼如下:

<p><strong>輸入您注冊的電子郵箱，找回密碼：</strong></p>

<p><input type="text" class="input" name="email" id="email"><span id="chkmsg"></span></p>

<p><input type="button" class="btn" id="sub_btn" value="提交"></p>

jQuery,當用戶輸入完郵箱并點擊提交后，jQuery先驗證郵箱格式是否正確，如果正確則通過向后臺sendmail.php發送Ajax請求，sendmail.php負責驗證郵箱是否存在和發送郵件，并會返回相應的處理結果給前臺頁面，請看jQuery代碼：

$(function(){

    $("#sub_btn").click(function(){

        var email = $("#email").val();

        var preg = /^w+([-+.]w+)*@w+([-.]w+)*.w+([-.]w+)*/; //匹配Email

        if(email=='' || !preg.test(email)){

            $("#chkmsg").html("請填寫正確的郵箱！");

        }else{

            $("#sub_btn").attr("disabled","disabled").val('提交中..').css("cursor","default");

            $.post("sendmail.php",{mail:email},function(msg){

                if(msg=="noreg"){

                    $("#chkmsg").html("該郵箱尚未注冊！");

                    $("#sub_btn").removeAttr("disabled").val('提交').css("cursor","pointer");

                }else{

                    $(".demo").html("<h3>"+msg+"</h3>");

                }

            });

        }

    });

})

以上使用的jQuery代碼很方便簡潔的完成了前端交互操作,如果您有一定的jQuery基礎,那上面的代碼一目了然,不多解釋。

當然別忘了在頁面中加載jQuery庫文件,有的同學經常問我說從www.49028c.com下載了demo怎么用不了,那80%是jquery或者其他文件加載路徑錯了導致沒加載必要的文件。

PHP:sendmail.php需要驗證Email是否存在系統用戶表中，如果有，則讀取用戶信息，將用戶id、用戶名和密碼驚醒md5加密生成一個特別的字符串作為找回密碼的驗證碼，然后構造URL,同時我們為了控制URL鏈接的時效性，將記錄用戶提交找回密碼動作的操作時間，最后調用郵件發送類發送郵件到用戶郵箱，發送郵件類smtp.class.php已經打包好,請下載,代碼如下:

include_once("connect.php");//連接數據庫

$email = stripslashes(trim($_POST['mail']));



$sql = "select id,username,password from `t_user` where `email`='$email'";

$query = mysql_query($sql);

$num = mysql_num_rows($query);

if($num==0){//該郵箱尚未注冊！

    echo 'noreg';

    exit;

}else{

    $row = mysql_fetch_array($query);

    $getpasstime = time();

    $uid = $row['id'];

    $token = md5($uid.$row['username'].$row['password']);//組合驗證碼

    $url = "/demo/resetpass/reset.php?email=".$email."

&token=".$token;//構造URL

    $time = date('Y-m-d H:i');

    $result = sendmail($time,$email,$url);

    if($result==1){//郵件發送成功

        $msg = '系統已向您的郵箱發送了一封郵件<br/>請登錄到您的郵箱及時重置您的密碼！';

        //更新數據發送時間

        mysql_query("update `t_user` set `getpasstime`='$getpasstime' where id='$uid '");

    }else{

        $msg = $result;

    }

    echo $msg;

}

//發送郵件

function sendmail($time,$email,$url){

    include_once("smtp.class.php");

    $smtpserver = ""; //SMTP服務器，如smtp.163.com

    $smtpserverport = 25; //SMTP服務器端口

    $smtpusermail = ""; //SMTP服務器的用戶郵箱

    $smtpuser = ""; //SMTP服務器的用戶帳號

    $smtppass = ""; //SMTP服務器的用戶密碼

    $smtp = new Smtp($smtpserver, $smtpserverport, true, $smtpuser, $smtppass);

    //這里面的一個true是表示使用身份驗證,否則不使用身份驗證.

    $emailtype = "HTML"; //信件類型，文本:text；網頁：HTML

    $smtpemailto = $email;

    $smtpemailfrom = $smtpusermail;

    $emailsubject = "www.111cn.net - 找回密碼";

    $emailbody = "親愛的".$email."：<br/>您在".$time."提交了找回密碼請求。請點擊下面的鏈接重置密碼

（按鈕24小時內有效）。<br/><a href='".$url."'target='_blank'>".$url."</a>";

    $rs = $smtp->sendmail($smtpemailto, $smtpemailfrom, $emailsubject, $emailbody, $emailtype);

    return $rs;

}

好了,這個時候你的郵箱將會收到一封來自helloweba的密碼找回郵件,郵件內容中有一個URL鏈接,點擊該鏈接到www.49028c.com的reset.php來驗證郵箱,代碼如下:

include_once("connect.php");//連接數據庫

$token = stripslashes(trim($_GET['token']));

$email = stripslashes(trim($_GET['email']));

$sql = "select * from `t_user` where email='$email'";

$query = mysql_query($sql);

$row = mysql_fetch_array($query);

if($row){

    $mt = md5($row['id'].$row['username'].$row['password']);

    if($mt==$token){

        if(time()-$row['getpasstime']>24*60*60){

            $msg = '該鏈接已過期！';

        }else{

            //重置密碼...

            $msg = '請重新設置密碼，顯示重置密碼表單，<br/>這里只是演示，略過。';

        }

    }else{

        $msg =  '無效的鏈接';

    }

}else{

    $msg =  '錯誤的鏈接！';

}

echo $msg;

reset.php首先接受參數email和token,然后根據email查詢數據表t_user中是否存在該Email，如果存在則獲取該用戶的信息，并且和sendmail.php中的token組合方式一樣構建token值，然后與url傳過來的token進行對比，如果當前時間與發送郵件時的時間相差超過24小時的，則提示“該鏈接已過期！”，反之，則說明鏈接有效，并且調轉到重置密碼頁面，最后就是用戶自己設置新密碼了。

小結：通過注冊郵箱驗證與本文郵件找回密碼，我們知道發送郵件在網站開發中的應用以及它的重要性，當然，現在也流行短信驗證應用，這個需要相關的短信接口對接就可以了。

最后,附上數據表t_user結構,代碼如下:

CREATE TABLE `t_user` (

  `id` int(11) NOT NULL auto_increment,

  `username` varchar(30) NOT NULL,

  `password` varchar(32) NOT NULL,

  `email` varchar(50) NOT NULL,

  `getpasstime` int(10) NOT NULL,

  PRIMARY KEY  (`id`)

) ENGINE=MyISAM  DEFAULT CHARSET=utf8;

smtp.class.php類文件,代碼如下:

<?php

class Smtp{

    /* Public Variables */

var $smtp_port;

var $time_out;

var $host_name;

var $log_file;

var $relay_host;

var $debug;

var $auth;

var $user;

var $pass;

/* Private Variables */

var $sock;

/* Constractor */

function smtp($relay_host = "", $smtp_port = 25, $auth = false, $user, $pass) {

  $this->debug = false;

  $this->smtp_port = $smtp_port;

  $this->relay_host = $relay_host;

  $this->time_out = 30; //is used in fsockopen()

  $this->auth = $auth; //auth

  $this->user = $user;

  $this->pass = $pass;

  $this->host_name = "localhost"; //is used in HELO command

  $this->log_file = "";

  $this->sock = false;

}

/* Main Function */

function sendmail($to, $from, $subject = "", $body = "", $mailtype, $cc = "", $bcc = "", $additional_headers = "") {

  $mail_from = $this->get_address($this->strip_comment($from));

  $body = ereg_replace("(^|(rn))(.)", "1.3", $body);

  $header .= "MIME-Version:1.0rn";

  if ($mailtype == "HTML") {

   $header .= "Content-Type:text/htmlrn";

  }

  $header .= "To: " . $to . "rn";

  if ($cc != "") {

   $header .= "Cc: " . $cc . "rn";

  }

  $header .= "From: $from<" . $from . ">rn";

  $header .= "Subject: " . $subject . "rn";

  $header .= $additional_headers;

  $header .= "Date: " . date("r") . "rn";

  $header .= "X-Mailer:By Redhat (PHP/" . phpversion() . ")rn";

  list ($msec, $sec) = explode(" ", microtime());

  $header .= "Message-ID: <" . date("YmdHis", $sec) . "." . ($msec * 1000000) . "." . $mail_from . ">rn";

  $TO = explode(",", $this->strip_comment($to));

  if ($cc != "") {

   $TO = array_merge($TO, explode(",", $this->strip_comment($cc)));

  }

  if ($bcc != "") {

   $TO = array_merge($TO, explode(",", $this->strip_comment($bcc)));

  }

  $sent = true;

  foreach ($TO as $rcpt_to) {

   $rcpt_to = $this->get_address($rcpt_to);

   if (!$this->smtp_sockopen($rcpt_to)) {

    $this->log_write("Error: Cannot send email to " . $rcpt_to . "n");

    $sent = false;

    continue;

   }

   if ($this->smtp_send($this->host_name, $mail_from, $rcpt_to, $header, $body)) {

    $this->log_write("E-mail has been sent to <" . $rcpt_to . ">n");

   } else {

    $this->log_write("Error: Cannot send email to <" . $rcpt_to . ">n");

    $sent = false;

   }

   fclose($this->sock);

   $this->log_write("Disconnected from remote hostn");

  }

  return $sent;

}

/* Private Functions */

function smtp_send($helo, $from, $to, $header, $body = "") {

  if (!$this->smtp_putcmd("HELO", $helo)) {

   return $this->smtp_error("sending HELO command");

  }

  // auth

  if ($this->auth) {

   if (!$this->smtp_putcmd("AUTH LOGIN", base64_encode($this->user))) {

    return $this->smtp_error("sending HELO command");

   }

   if (!$this->smtp_putcmd("", base64_encode($this->pass))) {

    return $this->smtp_error("sending HELO command");

   }

  }

  if (!$this->smtp_putcmd("MAIL", "FROM:<" . $from . ">")) {

   return $this->smtp_error("sending MAIL FROM command");

  }

  if (!$this->smtp_putcmd("RCPT", "TO:<" . $to . ">")) {

   return $this->smtp_error("sending RCPT TO command");

  }

  if (!$this->smtp_putcmd("DATA")) {

   return $this->smtp_error("sending DATA command");

  }

  if (!$this->smtp_message($header, $body)) {

   return $this->smtp_error("sending message");

  }

  if (!$this->smtp_eom()) {

   return $this->smtp_error("sending <CR><LF>.<CR><LF> [EOM]");

  }

  if (!$this->smtp_putcmd("QUIT")) {

   return $this->smtp_error("sending QUIT command");

  }

  return true;

}

function smtp_sockopen($address) {

  if ($this->relay_host == "") {

   return $this->smtp_sockopen_mx($address);

  } else {

   return $this->smtp_sockopen_relay();

  }

}

function smtp_sockopen_relay() {

  $this->log_write("Trying to " . $this->relay_host . ":" . $this->smtp_port . "n");

  $this->sock = @ fsockopen($this->relay_host, $this->smtp_port, $errno, $errstr, $this->time_out);

  if (!($this->sock && $this->smtp_ok())) {

   $this->log_write("Error: Cannot connenct to relay host " . $this->relay_host . "n");

   $this->log_write("Error: " . $errstr . " (" . $errno . ")n");

   return false;

  }

  $this->log_write("Connected to relay host " . $this->relay_host . "n");

  return true;

  ;

}

function smtp_sockopen_mx($address) {

  $domain = ereg_replace("^.+@([^@]+)$", "1", $address);

  if (!@ getmxrr($domain, $MXHOSTS)) {

   $this->log_write("Error: Cannot resolve MX "" . $domain . ""n");

   return false;

  }

  foreach ($MXHOSTS as $host) {

   $this->log_write("Trying to " . $host . ":" . $this->smtp_port . "n");

   $this->sock = @ fsockopen($host, $this->smtp_port, $errno, $errstr, $this->time_out);

   if (!($this->sock && $this->smtp_ok())) {

    $this->log_write("Warning: Cannot connect to mx host " . $host . "n");

    $this->log_write("Error: " . $errstr . " (" . $errno . ")n");

    continue;

   }

   $this->log_write("Connected to mx host " . $host . "n");

   return true;

  }

  $this->log_write("Error: Cannot connect to any mx hosts (" . implode(", ", $MXHOSTS) . ")n");

  return false;

}

function smtp_message($header, $body) {

  fputs($this->sock, $header . "rn" . $body);

  $this->smtp_debug("> " . str_replace("rn", "n" . "> ", $header . "n> " . $body . "n> "));

  return true;

}

function smtp_eom() {

  fputs($this->sock, "rn.rn");

  $this->smtp_debug(". [EOM]n");

  return $this->smtp_ok();

}

function smtp_ok() {

  $response = str_replace("rn", "", fgets($this->sock, 512));

  $this->smtp_debug($response . "n");

  if (!ereg("^[23]", $response)) {

   fputs($this->sock, "QUITrn");

   fgets($this->sock, 512);

   $this->log_write("Error: Remote host returned "" . $response . ""n");

   return false;

  }

  return true;

}

function smtp_putcmd($cmd, $arg = "") {

  if ($arg != "") {

   if ($cmd == "")

    $cmd = $arg;

   else

    $cmd = $cmd . " " . $arg;

  }

  fputs($this->sock, $cmd . "rn");

  $this->smtp_debug("> " . $cmd . "n");

  return $this->smtp_ok();

}

function smtp_error($string) {

  $this->log_write("Error: Error occurred while " . $string . ".n");

  return false;

}

function log_write($message) {

  $this->smtp_debug($message);

  if ($this->log_file == "") {

   return true;

  }

  $message = date("M d H:i:s ") . get_current_user() . "[" . getmypid() . "]: " . $message;

  if (!@ file_exists($this->log_file) || !($fp = @ fopen($this->log_file, "a"))) {

   $this->smtp_debug("Warning: Cannot open log file "" . $this->log_file . ""n");

   return false;

   ;

  }

  flock($fp, LOCK_EX);

  fputs($fp, $message);

  fclose($fp);

  return true;

}

function strip_comment($address) {

  $comment = "([^()]*)";

  while (ereg($comment, $address)) {

   $address = ereg_replace($comment, "", $address);

  }

  return $address;

}

function get_address($address) {

  $address = ereg_replace("([ trn])+", "", $address);

  $address = ereg_replace("^.*<(.+)>.*$", "1", $address);

  return $address;

}

function smtp_debug($message) {

  if ($this->debug) {

   echo $message . "

   ;";

  }

}

}

?>