<?php

include "general.php";
include "connect.php";



$oldpass = $_POST['oldpass'];
$newpass = $_POST['newpass'];
$cnewpass = $_POST['cnewpass'];
//echo $oldpass.$newpass.$cnewpass;
//check if new and confirm password matched.
$cnt1 = 0;
if($newpass != $cnewpass){
	echo "<p style='color:red'>Sorry, New and Confirm Password did not match!</p>";
	$cnt1 = 1;
}

if ($cnt1 ==0){
	if(strlen($newpass) < 6){
		echo "<p style='color:red'>Sorry, New Password is too short!</p>";
		$cnt1 = 1;
	}
}


if ($cnt1 ==0){
	$query = "Select msisdn from penpalsubscriber where pass = password('".$oldpass."') and palid ='$palid'";
	$queryresponse = getQuery1($query);

	if($queryresponse =="#"){
		echo "<p style='color:red'>Sorry, Old Password is not correct!</p>";
		$cnt1 = 1;
	}else {
			$query ="update penpalsubscriber set pass=password('$newpass') where pass = password('".$oldpass."') and palid ='$palid'";
			$queryresponse = updateQuery($query);
			if($queryresponse=="0")
					echo "<p style='color:blue'>Password successfully changed</p>";
			else {
				echo "<p style='color:red'>Sorry, we cannot change your password now. Please try again later!</p>";
			}
		$cnt1 = 1;
	}
}

?>