<?php session_start();

//exit("yes");

include("lib/conn.php");

//include "includes/libmail.php";

if($_POST['button']=='Submit'){
	
		$oldPass = $_POST['old_pass'];
		
		$newPass = $_POST['new_pass'];
		
		$conPass = $_POST['con_pass'];
	
		if(!empty($_SESSION['sat_login_id'])){
			
		$sql_old = "select id,password from admin where id='".$_SESSION['sat_login_id']."'";
		
		$qry_old = mysql_query($sql_old);
		
		$arr_old = mysql_fetch_assoc($qry_old);
		
		$passOld = $arr_old['password'];
		
		$id = $arr_old['id'];
		
		if($oldPass == $passOld){
		
			if($newPass == $conPass){
		
				mysql_query("update admin set password='".$newPass."' where id='".$id."'");
		
				header("location:changepassword.php?success=1");
		
				exit();
		
			}
		
			else{
		
				header("location:changepassword.php?error=2");
		
				exit();
		
			}
		
		}
		else{
		
			header("location:changepassword.php?error=1");
		
			exit();
		
		}
		
		}else if(!empty($_SESSION['sat_login_id'])){
			
		$sql_old = "select user_id,password from sat_users where user_id='".$_SESSION['sat_login_id']."'";
		
		$qry_old = mysql_query($sql_old);
		
		$arr_old = mysql_fetch_assoc($qry_old);
		
		$passOld = $arr_old['password'];
		
		$id = $arr_old['user_id'];
		
		if($oldPass == $passOld){
		
			if($newPass == $conPass){
				
				mysql_query("update sat_users set password='".md5($newPass)."' where user_id='".$id."'");
		
				header("location:changepassword.php?success=1");
		
				exit();
		
			}
		
			else{
		
				header("location:changepassword.php?error=2");
		
				exit();
		
			}
		
		}
		else{
		
			header("location:changepassword.php?error=1");
		
			exit();
		
		}
		
		}
		
}

else{

	header("location:changepassword.php?error=3");

	exit();

}