Password problems

How do I keep the system from resetting the password when someone forgets it and must retrieve it? Also is there a way to give them thier password in the activation email. I tried putting in the code from the forgot password email but it changes the password instead of sending the current password. I did search the forum but didn't find an answer. Thanks in advance for the help.

Password not keeping in database, it had only hashe - MD5, and no way to revert password back.

This was secure hole - after was decided to transfer all passwords to MD5.

About MD5 you always can read in internet - use google.

You cannot retrive your old passwords with the current md5 algorithm. You can have a lookup tables that are available online. That might help.

using md5 improves the security.