Lost password being sent ok but then not accepting new password

I had this all working correctly but now it seems to be having an issue. If a user loses their password and enters their email then an email is correctly generated and sent to them with a new random password. The problem however is that the new password does not work. I have confirmed that the encrypted password in the database is changing. I have also created a similar page in which an administrator can click a button after inserting a new user to send a similar email and the result is the same problem. Email sent with username and password but when the user goes to login the password is not accepted. Thank you.

I had this problem a few days ago and shrugged it off to my internet connection or.., however, the site went live today and we had clients calling saying that they were unable to login with the emailed credentials. If we entered a password for them and did not let the random generator assign the password then they did not have a problem. A half hour ago neither of the above page would work correctly, but I just tested again and they both worked?...(Sent an email and the passwords worked.) Can you please look at these pages and see if you have any ideas. Thank you.

The code looks correct, I do not see a problem.


can you send a copy of the login page so I can take at look at the codfe there?

Also if you could post back the value that is stored in the password column and the value sent ion the email so I can investigate, this may help me troubleshoot the problem.

The system just worked fine but I know there was an issue for more than just me. Here is the login page, copy of the email sent, and the encrypted password. I know it is hard with an internmittent problem, but have you heard of this before? Have you heard of a server issue causing this? Thanks, Bryan

-------------------------------------
Here is your login information with a new password - You can change this password once you login.

User name: squeaky
Password: eVyVTfNt
------------------------------

encrypted password - e541bfb4cb369b8e0504adcef37537720b228212

-------------------

Any thoughts? Thanks, Bryan

honestly, I'm baffled. If the value is being updated in the database, the login should be working. to make sure that the database is being updated with the correct value, take the string in the email:
eVyVTfNt


and convert it to the sha1 equivilant:
<?php echo(sha1("eVyVTfNt")); ?>


this should match the value in the database.

If it is updating in the database, tyhe only thing I can think is the user is not entering it correctly in the login form. Maybe they are typing it manually and getting the case wrong? or they are copying and pasting an extra space?

<?php echo(sha1("eVyVTfNt ")); ?>


will get a different result than:
<?php echo(sha1("eVyVTfNt")); ?>

Thanks. I will go back to using the system. I suspect that it was a server issue and hope that it does not happen again, but if it does will investigate it more at that time.