'; ?> Change Password get("mb_user_name"); $logged_user_id=Mapbender::session()->get("mb_user_id"); /* handle INSERT and DELETE */ if($upd){ $sql_user_id = "SELECT mb_user_id FROM mb_user WHERE mb_user_id = $1 "; $v = array($logged_user_id); $t = array('i'); $res_user_id = db_prep_query($sql_user_id,$v,$t); $real_user_id = db_result($res_user_id,0,"mb_user_id"); $sql_password = "SELECT mb_user_password, mb_user_password = $1 as new FROM mb_user where mb_user_id = $2"; $v = array($newpassword,$real_user_id); $t = array('s','i'); $res_password = db_prep_query($sql_password,$v,$t); if( db_result($res_password,0,"mb_user_password") == md5($oldpassword) && db_result($res_password,0,"mb_user_password") != db_result($res_password,0,"new")){ $sql_update = "UPDATE mb_user SET mb_user_password = $1"; $v = array(md5($newpassword)); $t = array('s'); $sql_update .= " WHERE mb_user_id = $2 "; array_push($v,$real_user_id); array_push($t,'i'); db_prep_query($sql_update,$v,$t); echo ""; } elseif (db_result($res_password,0,"mb_user_password") != md5($oldpassword)){ echo ""; } else { echo ""; } } /* HTML */ echo "
Change password:"; echo "
"; echo ""; echo ""; echo ""; echo ""; echo""; echo ""; echo ""; echo ""; echo""; echo""; echo ""; echo ""; echo ""; echo""; echo""; echo"
"; echo "old password:"; echo ""; echo ""; echo "
"; echo "new password:"; echo ""; echo ""; echo "
"; echo "confirm:"; echo ""; echo ""; echo "
"; echo ""; echo "
"; echo ""; echo "
"; echo "
"; ?>

Please note: