title: PHP password recovery
body: <p>I realize that for security that passwords should not be stored in a DB as plaintext.  If I hash them, I can validate them for login purposes.</p>
  
  <p>But if I want to set up a password recovery system, what's the best strategy since there is no undoing of the hashing? </p>
  
  <p>Could someone give me a brief overview of a good and secure strategy for storing and recovering passwords? </p>