<div align="center">
<form action="ganti2_pass.php" method="post" >
<h2><u>Ganti Password </u></h2>
<table width="320" border="0">
<tr>
<td width="119">Password Lama </td>
<td width="14">:</td>
<td width="173"><input type="password" name="pwd_lama" /></td>
</tr>
<tr>
<td>Password Baru </td>
<td>:</td>
<td><input type="password" name="pwd_baru" /></td>
</tr>
<tr>
<td>Konfirmasi</td>
<td>:</td>
<td><input name="confirm" type="password" /></td>
</tr>
<tr>
<td height="44" colspan="3">

<div align="center">
<input type="submit" name="Submit" value="Ganti Password" />
</div></td>
</tr>
</table>
</form>
</div>

<?php
include "../include/connect.php";

$pwd_lama = md5($_POST['pwd_lama']);
$pwd_baru = $_POST['pwd_baru'];
$confirm = $_POST['confirm'];

$query1 = mysql_query("SELECT password FROM admin WHERE password = '$pwd_lama'");
$kode = $_SESSION['username'];
$lama = mysql_num_rows($query1);
echo mysql_error();

if ($lama==0){ ?>
[removed]alert('Password Lama Salah!');document.location.href="ganti_pass.php"[removed]<?php
}else if ($pwd_baru!=$confirm){
?>
[removed]alert('Password Baru Tidak Cocok!');document.location.href="ganti_pass.php"[removed]<?php
}else{
$update = mysql_query("UPDATE admin SET password = md5('$confirm') WHERE kode_admin='$kode'");
echo "[removed]alert('Password Sudah Diubah ^_^')[removed]";?>[removed]document.location.href="ganti_pass.php"[removed]<?php
}

?>