// start page
<div id='forgot' class='modal-window'>
        <h2 style='text-align:left'>Forgot Password</h2>
        <br>
        <form method='post' action='project_Controller.php' >
            <input type='hidden' name='page' value='StartPage'></input>
            <input type='hidden' name='command' value='ForgotPass'></input>

            <label class='modal-label'>Username:</label>
            <input type='text' name='username' placeholder='Enter username' required></input>
            <?php if (!empty($error_msg_username)) echo $error_msg_username; ?>
            <br>
            <label class='modal-label'>Email:</label>
            <input type='text' name='email' placeholder='Enter email address' required></input>
            <?php if (!empty($error_msg_email)) echo $error_msg_email; ?>
            <br>
            <br>
            <button type='submit' value='Submit'>Retrieve Password</button>
            <button type='reset' value='Reset'>Reset</button>
            <button id='cancel-forgot' type='cancel' value='Cancel'>Cancel</button>
        </form>
    </div>



//controller
case 'ForgotPass':
			$username = $_POST['username'];
            $email = $_POST['email'];
			// send email in future
			$message = "";
			if (retrieve_pass($username, $email) != "") {
				$message = 'Password: ' . retrieve_pass($username, $email);
				echo "<script type='text/javascript'>alert('$message');</script>";
			}
            $display_type = 'no-signin';
            include('project_StartPage.php');
            break;

// modal
function does_exist($username)
{
    global $conn;

    $sql = "select * from p_users where (Username = '$username')";
    $result = mysqli_query($conn, $sql);
    if (mysqli_num_rows($result) > 0)
        return true;
    else
        return false;
}

function retrieve_pass($username, $email)
{
    global $conn;

    if (does_exist($username)) {
        $sql = "select Password from p_users where (Username = '$username' and Email = '$email')";

		$result = mysqli_query($conn, $sql);
		if (mysqli_num_rows($result) > 0) {
			$row = mysqli_fetch_assoc($result);
			return $row['Password'];
		}
    else
        return "error occured";
	}
}