]nbmbmbnmbnmbytutytyutyutyutyumbnmjhkhjkhjkhjkhjkhjknnnnnnnn

<?php session_start(); include("config.php"); $error=''; if (isset($_POST['update'])) { $oldpass = md5 ($_POST['oldpass']); $sql="select * from admin where password='$oldpass'"; $result = mysqli_query($db,$sql); $row=mysqli_fetch_array($result); $password=$row['password']; $pass = md5 ($_POST['pass']); if(!$password==$oldpass) { echo ("<script LANGUAGE='JavaScript'>window.alert('Old Pass Wrong.!');window.location.href='recoverpw.php';</script>"); } else { $query="update admin set password='$pass'"; $res = mysqli_query($db,$query); if($res==1) { echo ("<script LANGUAGE='JavaScript'>window.alert('password Reset Sucessfully.!');window.location.href='index.php';</script>"); } else { $error = "wrong pass"; } } } ?>