<br>
<?php
// Connects to your Database
mysql_connect($sql_host, $sql_user, $sql_pass) or die(mysql_error());
mysql_select_db($sql_db) or die(mysql_error());
//This code runs if the form has been submitted
if (isset($_POST['submit'])) {
//This makes sure they did not leave any fields blank
if (!$_POST['username'] | !$_POST['pass1'] | !$_POST['pass2'] | !$_POST['pass3'] ) {
die('You did not complete all of the required fields');
}
// checks if the username is in use
if (!get_magic_quotes_gpc()) {
$_POST['username'] = addslashes($_POST['username']);
}
$usercheck = $_POST['username'];
$check = mysql_query("SELECT username FROM accounts WHERE username = '$usercheck'")
or die(mysql_error());
$check2 = mysql_num_rows($check);
//if the name exists it gives an error
if ($check2 == 0) {
die('Sorry, the username '.$_POST['username'].' doesn\'t exist.');
}
// checks old password
$check = mysql_query("SELECT password FROM accounts WHERE username = '$usercheck'")
or die(mysql_error());
if ($password != $pass1) {
die('Incorrect password.');
}
// this makes sure both passwords entered match
if ($_POST['pass3'] != $_POST['pass2']) {
die('Your new passwords did not match. ');
}
// here we encrypt the password and add slashes if needed
$_POST['pass2'] = md5($_POST['pass2']);
if (!get_magic_quotes_gpc()) {
$_POST['pass2'] = addslashes($_POST['pass2']);
$_POST['username'] = addslashes($_POST['username']);
}
// now we insert it into the database
$insert = "UPDATE accounts (password) VALUES ('".$_POST['pass2']."')";
$add_member = mysql_query($insert);
?>
<!-- Now we let them know if their registration was successful -->
<h1>Password Changed</h1>
<p>Your Password has been changed.</a>.</p>
<?php
}
else
{
?>
<!-- This is what they see before they have registered -->
<form action="<?php echo $_SERVER['PHP_SELF']; ?>" method="post">
<table border="0">
<tr><td>Username:</td><td>
<input type="text" name="username" maxlength="60">
</td></tr>
<tr><td>Old Password:</td><td>
<input type="password" name="pass1" maxlength="10">
</td></tr>
<tr><td>New Password:</td><td>
<input type="password" name="pass2" maxlength="10">
</td></tr>
<tr><td>Confirm New Password:</td><td>
<input type="password" name="pass3" maxlength="10">
</td></tr>
<tr><th colspan=2><input type="submit" name="submit" value="Change"></th></tr> </table>
</form>
<?php
}
?>
