PHP Forum

**syaza** · 10-31-2009, 10:15 AM

why i cannot update password in the database...below is showing the my code for update password...please help me..

<?php
session_start();

if(!(isset($_SESSION['valid'])))
{

}
if(isset($_POST['submit']) && $_POST['pass1']==$_POST['pass2'])
{
$db=mysql_connect("localhost","root","");
mysql_select_db("jmti",$db);
$password=$_POST['password'];
$username=$_SESSION['username'];
$sql="update tbuser set password='$password'where username='$username'";
$result=mysql_query($sql);
echo "succesfully updated";
echo "</br>";
}
elseif($_POST['pass1']!=$_POST['pass2'])
{
echo "both password filled are not same";

?>
<html>
<body>
<form method="post">
<table>
<tr>
<td>Type new password</td>
<td><input type="password" name="pass1"></td>
</tr>
<tr>
<td>Retype new password</td>
<td><input type="password" name="pass2"></td>
</tr>
<tr>
<td><input type="submit" name="submit" value="submit"></td>
</tr>
<tr>
</form>
</body>
</html>
<?php
}

else
{
?>
<html>
<body>
<form method="post">
<table>
<tr>
<td>Type new password</td>
<td><input type="password" name="pass1"></td>
</tr>
<tr>
<td>Retype new password</td>
<td><input type="password" name="pass2"></td>
</tr>
<tr>
<td><input type="submit" name="submit" value="submit"></td>
</tr>
<tr>

</table>
</form>
</body>
</html>
<?php
}
?>

**chrishirst** · 10-31-2009, 10:17 AM

And the error message is???

**syaza** · 10-31-2009, 11:46 AM

the password can not update in the databse...

**sith717** · 10-31-2009, 12:02 PM

Here ya go:

PHP Code:


			
<?php 
error_reporting(E_ALL); 
$config = "inc/config.php"; 
if(file_exists($config)) 
{ 
    include($config); 
} 
else 
{ 
    die("config dir incorrect<br />"); 
} 

if (isset($_POST['chpass']))  
{ 
    $newPass = $_POST['newpass']; 
    $veri = $_POST['veri']; 
    $strcmp = strcmp($newPass, $veri);
    if($strcmp == 0)
    {
        $result = mysql_query("SELECT * FROM `admin` WHERE id = '1'"); 
        if(mysql_num_rows($result)!=0) 
        { 
            $row = mysql_fetch_array($result); 
            $pass = $row['password']; 
            if(strcmp($_POST['oldpass'], $pass) == 0)  
            { 
                $newPass = strip_tags(mysql_real_escape_string($newPass)); 
                mysql_query("UPDATE `admin` SET password = '$newPass' where id = '1'"); 
                echo "Your Password has been changed. Please out to verify the password change. <br> <hr>"; 
            } 
            else 
            { 
                echo "The old password is incorrect. Please try again. <br> <hr>";     
            } 
        } 
        else 
        { 
            echo "Could not find the member you are changing the password for. <br> <hr>";     
        } 
    }
    else
    {
        echo "Your new password's do not match. Please try again.<br> <hr>";
    }
} 

?>

Code:

<form action="accounts-password.php" method="POST"> 
<input type="hidden" name="member" value="1" /> 

<span style="float: left;">
Your old Password:
</span>
<span style="float: right;">
<input size="40" type="password" name="oldpass">
</span>
<br><br>
<hr>

<span style="float: left;">
Your New Password:
</span>
<span style="float: right;">
<input size="40" type="password" name="newpass">
</span>
<br><br>

<span style="float: left;">
Re-Type Your New Password:
</span>
<span style="float: right;">
<input size="40" type="password" name="veri">
</span>



<br><br>
<hr>


<center>
<input name="chpass" id="submit" value="Change Password" type="submit">
</center>

</form>

I used it for my admin area I made.

---

It has verification and u have to type in the old one.

---

Also will it be for 1 user or for many?

**syaza** · 10-31-2009, 02:44 PM

where the mistake in my code for change password?

**lizciz** · 07-25-2011, 09:48 AM

Add a space between '$password' and where.

And lets all just hope that you're not planning on using this for any important data...

**chrishirst** · 09:59 AM

This was posted in 2009 Mattias.