PHP password recovery

Question

I realize that for security that passwords should not be stored in a DB as plaintext. If I hash them, I can validate them for login purposes.

But if I want to set u

Answer 1

You don't 'recover' passwords. What you do is one of 2 things.

1. Email the user a link to create a new password, overriding the current one
2. Email the user a randomly generated password, then ask them to change it