purify($_POST['email']);
$resultemail=mysqli_query($link, "select * from `users` where email LIKE '$email' LIMIT 1");
if (mysqli_num_rows($resultemail)=='0'){
$note="The email address you entered does not exist";
$notecolor="danger";
$noteicon="ban";
} else {
// get user id
$resulttheirid=mysqli_query($link, "select * from `users` where email LIKE '$email' LIMIT 1");
while ($rowtheirid=mysqli_fetch_array($resulttheirid)){
$theirid=$rowtheirid['id'];
$theirname=$rowtheirid['firstname'];
}
$token=rand(00000000000,9999999999);
$sql = "UPDATE users SET token='$token' WHERE id='$theirid'";
mysqli_query($link, $sql);
$mailbody="Hi ".$theirname.",