// start page
<div id='forgot' class='modal-window'>
        <h2 style='text-align:left'>Forgot Password</h2>
        <br>
        <form method='post' action='project_Controller.php' >
            <input type='hidden' name='page' value='StartPage'></input>
            <input type='hidden' name='command' value='ForgotPass'></input>

            <label class='modal-label'>Username:</label>
            <input type='text' name='username' placeholder='Enter username' required></input>
            <?php if (!empty($error_msg_username)) echo $error_msg_username; ?>
            <br>
            <label class='modal-label'>Email:</label>
            <input type='text' name='email' placeholder='Enter email address' required></input>
            <?php if (!empty($error_msg_email)) echo $error_msg_email; ?>
            <br>
            <br>
            <button type='submit' value='Submit'>Retrieve Password</button>
            <button type='reset' value='Reset'>Reset</button>
            <button id='cancel-forgot' type='cancel' value='Cancel'>Cancel</button>
        </form>
    </div>



//controller
case 'ForgotPass':
            $username = $_POST['username'];
            $email = $_POST['email'];
            // send email in future
            $message = "";
            if (retrieve_pass($username, $email) != "") {
                $message = 'Password: ' . retrieve_pass($username, $email);
                echo "<script type='text/javascript'>alert('$message');</script>";
            }
            $display_type = 'no-signin';
            include('project_StartPage.php');
            break;

// modal
function does_exist($username)
{
    global $conn;

    $sql = "select * from p_users where (Username = '$username')";
    $result = mysqli_query($conn, $sql);
    if (mysqli_num_rows($result) > 0)
        return true;
    else
        return false;
}

function retrieve_pass($username, $email)
{
    global $conn;

    if (does_exist($username)) {
        $sql = "select Password from p_users where (Username = '$username' and Email = '$email')";

        $result = mysqli_query($conn, $sql);
        if (mysqli_num_rows($result) > 0) {
            $row = mysqli_fetch_assoc($result);
            return $row['Password'];
        }
    else
        return "error occured";
    }
}