how to change or update password

[aries283]

hi there,
im having problem to provide "change password" feature. ive tried several coding but nothing can solve it.

does anyone had experience regarding this problem?

[Atli]

Hey.

What have you tried so far?
Why/how does it not work?
Did you get any errors? Any unexpected behavior?
Can we see the code?

As far as theory goes (which is all I can give you, without any useful info regarding your situation), this should be as simple as:

1. Have the user submit the old password and the new password. And optionally a password "check" field, to make sure he entered it correctly.
2. Make sure the old passwords match.
3. If a "check" field was passed, make sure it matches the new password.
4. Update the database, using the new password.

[aries283]

@Atli
the password didnt update.even if ive used the update function.
here's the code.

<?php require_once('Connections/annajmi.php'); ?>
<?php
$colname_Recordset1 = "-1";
if (isset($_GET['pel_nsb'])) {
  $colname_Recordset1 = (get_magic_quotes_gpc()) ? $_GET['pel_nsb'] : addslashes($_GET['pel_nsb']);
}
mysql_select_db($database_annajmi, $annajmi);
$query_Recordset1 = sprintf("SELECT * FROM pelajar WHERE pel_nsb = '%s'", $colname_Recordset1);
$Recordset1 = mysql_query($query_Recordset1, $annajmi) or die(mysql_error());
$row_Recordset1 = mysql_fetch_assoc($Recordset1);
$totalRows_Recordset1 = mysql_num_rows($Recordset1);
 
 
if (isset($_POST['hantar'])) { 
// Handle the form.
 
 
 
// Create a function for escaping the data. 
function escape_data ($data) { 
global $dbc; // Need the connection. 
if (ini_get('magic_quotes_gpc')) { 
$data = stripslashes($data); 
} 
return mysql_real_escape_string($data, $dbc); 
} 
// End of function.
 
$message = NULL; // Create an empty new variable.
 
 
// Check for an existing password. 
if (empty($_POST['katalaluan'])) { 
$pa = FALSE; 
$message .= '<p>You forgot to enter your existing password!</p>'; 
} else { 
$pa = escape_data($_POST['katalaluan']); 
}
 
// Check for a password and match against the confirmed password. 
if (empty($_POST['katalaluanbaru'])) { 
$npa = FALSE; 
$message .= '<p>You forgot to enter your new password!</p>'; 
} else { 
if ($_POST['katalaluanbaru'] == $_POST['pastikatalaluan']) { 
$npa = escape_data($_POST['katalaluanbaru']); 
} else { 
$npa = FALSE; 
$message .= '<p>Your new password did not match the confirmed new password!</p>'; 
} 
}
 
if ($lo && $pa && $npa) { // If everything's OK.
 
$query = "SELECT * FROM pelajar WHERE (katanama=='$lo' AND katalaluan==katalaluan('$pa') )"; 
$result = @mysql_query ($query); 
$num = mysql_num_rows ($result); 
if ($num == '1') { 
$row = mysql_fetch_array($result);
 
// Make the query. 
$query = "UPDATE pelajar SET katalaluan=katalaluan('$npa') WHERE pel_nsb=$pel_nsb"; 
$result = @mysql_query ($query); // Run the query. 
if (mysql_num_rows() == 1) { // If it ran OK.
 
// Send an email, if desired. 
echo '<p><b>Your password has been changed.</b></p>';
 
exit(); // Quit the script.
 
} else { // If it did not run OK. 
$message = '<p>Your password could not be changed due to a system error. We apologize for any inconvenience.</p><p>' . mysql_error() . '</p>';
} 
} else { 
$message = '<p>Your loginName and password do not match our records.</p>'; 
} 
mysql_close(); // Close the database connection.
 
} else { 
$message .= '<p>Please try again.</p>'; 
}
 
} // End of the main Submit conditional.
 
// Print the error message if there is one. 
if (isset($message)) { 
echo '<font color="red">', $message, '</font>'; 
} 
?>
 
 
<p>&nbsp;</p>
<p>&nbsp;</p>
<form name="form1" method="post" action="">
  <p>&nbsp;</p>
  <fieldset>
  <legend>Enter your information in the form below:</legend>
  <p><b>Current password:</b>
      <input type="katalaluan" name="katalaluan" size="20" maxlength="20" />
  </p>
  <p><b>New password:</b>
      <input type="katalaluanbaru" name="katalaluanbaru" size="20" maxlength="20" />
  </p>
  <p><b>Confirm New password:</b>
      <input type="pastikatalaluan" name="pastikatalaluan" size="20" maxlength="20" />
  </p>
  </fieldset>
  <div align="center">
    <input type="submit" name="submit" value="change My password" />
  </div>
  <?php
mysql_free_result($Recordset1);
?>