I have a small community website and I need to implement some sort of forgotten password function. I currently store the passwords in the DB, encrypted with MD5.
Is
MD5 is a one way function. You can't decrypt it. SO you need to have a password reset page.
MD5