This is a bit of code I wrote a while ago to change courier mysql passwords, it takes an existing password from the DB, checks it and changes it to a new password. I haven't used it for a while so can't remember just how well it works but should be fine as a starting point.

<?php // $db_passwd is pulled from the DB ;)

if ($db_passwd == "" OR $_POST['newpassword'] != $_POST['newpassword2']) { echo "Error with Username or password<br />\n"; die; }

$old_passwd = crypt($_POST['password']); $passwd = crypt($passwd,$db_passwd);

$salt = substr($passwd, 0, 12); $salted_passwd = crypt($_POST['password'], $salt); $new_passwd = crypt($_POST['newpassword']);

// debug stuff echo ("Email: \"" . $_POST['username'] . "\"<br />\n"); echo ("Old passwd: \"" . $old_passwd . "\"<br />\n"); echo ("DB passwd: \"" . $db_passwd . "\"<br />\n"); echo ("DB passwd Length: \"" . strlen($db_passwd) . "\"<br />\n"); echo ("Crypted DB passwd: \"" . $passwd . "\"<br />\n"); echo ("Salted Old DB passwd: \"" . $salted_passwd . "\"<br />\n"); echo ("Salted Old DB passwd Length: \"" . strlen($salted_passwd) . "\"<br />\n");

if (trim($db_passwd) == trim($salted_passwd)) { echo "Password verified!<br />\n"; } else { echo "Error with Username or password<br />\n"; die; }

// do the rest.. add to db etc ?>

Hope it helps,

hunter