'.mysql_error());
}
mysql_select_db($mysql_database, $db) or die('Failed to select database
'.mysql_error());
$sql = "SELECT password FROM ".$mysql_table." WHERE username = '".mysql_real_escape_string($username_value)."'";
$result = mysql_query($sql, $db);
if ($data = mysql_fetch_array($result))
{
if ($password_value == $data['password'])
{
$sql = "UPDATE `".$mysql_table."` SET `password` = '$newpassword' WHERE `username` = '$username_value'";
mysql_query($sql, $db);
}
else
{
$error_message = 'Old password is not valid!';
}
}
mysql_close($db);
if (empty($error_message))
{
header('Location: '.$success_page);
exit;
}
}
}
}
?>