<?php
require_once '../../library/config.php';
require_once '../library/functions.php';
function changePsw()
{
if (isset($_GET['AId']) && (int)$_GET['AId'] > 0) {
		$AId = (int)$_GET['AId'];
	} else { header('Location: index.php'); }
$opass = $_POST['oldPass'];
$npass = $_POST['newPass'];
$cpass = $_POST['confPass'];

$sql= "SELECT * FROM chadmin WHERE AID=$AId";
$result = dbQuery($sql);
$row    = dbFetchAssoc($result);
if($opass != "" && md5($opass) != $row['User_Password'])
{
$errmsg = "Old Password Not Matched";
}
elseif ($npass != $cpass)
{
$errmsg = "Confirm Password Not Matched ";
}
else { 
$sql= "UPDATE chadmin SET  User_Password = '".md5($cpass)."' WHERE AID=$AId";
$result = dbQuery($sql);
$errmsg = "Password Changed";
}
return $errmsg;
}
?>