stage=request.querystring("stage")
if stage="send" then
'look up email/password and send
set rspass=db.execute("select * from customers where email='" & valid_sql(request.form("email")) & "'")
if rspass.eof then
msg="Unable to locate a user with that email address "
else
msgBody="Hi " & rspass("fname") & "," & chr(13) & "You are receving this email because you indictaed to us at " & storename
msgBody=msgBody & " that you had forgotton your password." & chr(13) & chr(13)
msgbody=msgBody & "You email address is: " & rspass("email") & chr(13) & "Your password is: " & rspass("pass") & chr(13) & chr(13)
msgBody=msgBody & "Regards," & chr(13) & storename
'send message
send_mail rspass("email"),rspass("fname") & " " & rspass("lname"),"Lost Password",msgBody
msg="Your password has been sent to " & rspass("email")
end if
response.redirect("signin.asp?msg=" & msg)
end if
%>
EShop
