Şifre Sıfırlama

<?php
if(count($_POST) > 0 && isset($_POST['lost'])){
	$result = do_query("SELECT * FROM ".$INFO['sql_tbl_prefix']."user WHERE email='{$_POST['lost']}' LIMIT 1");
	if(mysql_num_rows($result) == 1){	
					$charset =   "utf-8";
					$user = mysql_fetch_array($result, MYSQL_ASSOC);
					$m= new Mail($charset);
					$m->From($_SET['title_from'].";".$_SET['email_from']);					
					$m->ReplyTo($_SET['title_from'].";".$_SET['email_from']);
					$m->To($_POST['lost']); 					
					$m->Subject("[".$_SET['title_from']."] ".__('Password recovery'));
					$words = $words_new = array();
					$low = range('a','z');
					$words = array_merge($words, $low);
					$upper = range('A','Z');
					$words = array_merge($words, $upper);
					$numerals = range('0','9');
					$words = array_merge($words, $numerals);
					for($n=0;$n<=8;$n++){
						$words_new[]=$words[array_rand($words,1)];
					}
					$pass = implode('',$words_new);
					$text_html = "<p>".__('Good day your new password').": <b>".$pass."</b></p>";
					$m->Body($text_html, "html");
					$m->Priority(3);
					$m->Send();
					
					do_query("UPDATE ".$INFO['sql_tbl_prefix']."user SET pass = '".sha1($pass)."' WHERE id = ".$user['id']." LIMIT 1");
					?>
				    <script type="text/javascript">
						document.location.href="/";
					</script>
<?php	}	?>
<?php } ?>
<div class="row">
	<div class="col-md-<?php if($_SET['adsense'] == 1){?>9<?php }else{?>12<?php }?>">
    	<div class="well">
        	<form action="" method="post" class="form-horizontal">
              <legend><?php echo __('Please enter your email address. You will be sent a new password to your email.');?></legend>
                  <div class="input-group">
                      <span class="input-group-addon"><i class="fa fa-envelope-o"></i></span>
                      <input type="email" name="lost" class="form-control" placeholder="<?php echo __('Username or email');?>" required>
                      <span class="input-group-btn">
                      <button type="submit" class="btn btn-primary"><?php echo __('Get New Password');?></button>
                      </span>
                  </div>
                <div class="clearfix"></div>
            </form>
        </div>
    </div>
<?php if($_SET['adsense'] == 1){?> 
        <div class="col-md-3">
            <?php if(strlen($_SET['ad_static']) > 0){
					echo "<div class='img-thumbnail'>".htmlspecialchars_decode($_SET['ad_static'])."</div>";
				}else{?>
		        	<img src="http://www.placehold.it/250x250/F0F0F0/AAAAAA&text=Ad+Sense+250x250" class="img-thumbnail" />
            	<?php }?>
        </div>
       <?php } ?>
</div>