You'll need to make some upgrades: such as using posts instead of gets.
PHP Code:
} elseif ($_GET['acp_action'] == "chgpass") {
if ($_GET['do'] != 1) {
echo '<form action="index.php" method="GET">
<input type="hidden" name="acp_action" value="chgpass">
New Password:<input type="password" name="np">
<input type="hidden" name="do" value="1">
<br><input type="submit" value="Change"></form>';
} else {
mysql_query("UPDATE `login` SET `Password` = '" . $_GET['np'] . "' WHERE `Username` = '" . $_SESSION['user'] . "'");
echo "Password Changed!";
}
}
Maybe you should sha1 the password?
EDIT: or even try this
PHP Code:
<?
$password = $_POST['np'];
if(!empty($password)){
(sha1(md5($password))); // Double encrypt the password, havent tryed it before, just a trail tbh.
}
?>