@Gordon Feyck
I don't think you get the concept.
1. DO NOT store plaintext passwords in a database.
2. DO NOT store the information required to verify passwords in the same database as the passwords.
3. If a user forgets a password, generate a new one and send it to them.
Biting the hand that feeds IT
