Club Drupal

  return url("user/reset/$account->uid/$timestamp/" . user_pass_rehash($account->pass, $timestamp, $account->login, $account->uid), array('absolute' => TRUE));

  return url("user/$account->uid/cancel/confirm/$timestamp/" . user_pass_rehash($account->pass, $timestamp, $account->login, $account->uid), array('absolute' => TRUE));

 * @param int $uid

 *   The user ID of the user account.

function user_pass_rehash($password, $timestamp, $login, $uid) {

  // Backwards compatibility: Try to determine a $uid if one was not passed.

  // (Since $uid is a required parameter to this function, a PHP warning will

  // be generated if it's not provided, which is an indication that the calling

  // code should be updated. But the code below will try to generate a correct

  // hash in the meantime.)

  if (!isset($uid)) {

    $uids = db_query_range('SELECT uid FROM {users} WHERE pass = :password AND login = :login AND uid > 0', 0, 2, array(':password' => $password, ':login' => $login))->fetchCol();

    // If exactly one user account matches the provided password and login

    // timestamp, proceed with that $uid.

    if (count($uids) == 1) {

      $uid = reset($uids);

    }

    // Otherwise there is no safe hash to return, so return a random string

    // that will never be treated as a valid token.

    else {

      return drupal_random_key();

    }

  }

  return drupal_hmac_base64($timestamp . $login . $uid, drupal_get_hash_salt() . $password);