Implementing password reset tokens

…In this movie, we'll see how to…implement password reset tokens in your PHP application.…When a user forgets their password, we need a way for them to reset it.…But we don't want to involve anyone in our customer service department.…And we have to do it in a secure way.…The question we really have to answer is, without…a username and a password, what proves someone's identity?…We could ask them for some privileged…information, something that only they would know.…Privileged information would be something that can't…be lost and which is not easily researchable.…

You could work out the privileged information with the user ahead of time by…asking them some security challenge questions when…they first signed up for the site.…For example, what was the name of your favorite teacher?…I'm not a big fan of security challenge…question, because the information can often be researched,…the user might forget their original answer, or…they might just type it differently each time.…Instead, most websites choose to use access to the user's…