session_start();
if (!session_is_registered("LLC"))
{
// if session check fails, invoke error handler
header("Location: ../loginform.php");
exit();
}
$user = $_SESSION['UNAME'];
$mmuser = trim($_POST['user']);
$pass1 = trim($_POST['pass1']);
$Pass2 = trim($_POST['pass2']);
if (strlen($pass1) < 3)
{
print "
Your password must be at least 3 letters/digits. Please go back and try again.
";
exit();
}
if ($pass1 != $pass2)
{
print "Your password is not confirmed. Please go back and try again.
";
exit();
}
include("../include/dbconfig.php");
$connection = mysql_connect($db_host, $db_user, $db_pass) or die ("Unable to connect!");
mysql_select_db($db_name);
$query = "update MM_user set Password=Password('$pass1') where UserName='$mmuser'";
$result = mysql_query($query, $connection) or die ("Error in query: $query. " . mysql_error());
header("Location: passinfo.php");
exit();
?>