why i can't change the password from my databased?
Code:
<?php
session_start();
include('includes/connect.php');
if (!isset($_SESSION['bpmsaid']) || strlen($_SESSION['bpmsaid']) == 0) {
} else {
if(isset($_POST['submit'])) {
$adminid=$_SESSION['bpmsaid'];
$cpassword=($_POST['currentpassword']);
$newpassword=($_POST['newpassword']);
$query=mysqli_query($con,"select ID from login where ID='$adminid' and password='$cpassword'");
$row=mysqli_fetch_array($query);
if($row>0){
$ret=mysqli_query($con,"update login set password='$newpassword' where ID='$adminid'");
echo '<script>alert("Your password successully changed.")</script>';
}
else {
echo '<script>alert("Your current password is wrong.")</script>';
}
}
}
?>
<head>
<title>BPMS - Change Password</title>
<script type="text/javascript">
function checkpass()
{
if(document.changepassword.newpassword.value!=document.changepassword.confirmpassword.value)
{
alert('New Password and Confirm Password field does not match');
document.changepassword.confirmpassword.focus();
return false;
}
return true;
}
</script>
</head>
<body>
<?php include_once('includes/header.php');?>
<?php include_once('includes/navbar.php');?>
<div class="container">
<div class="row">
<div class="col-lg-6">
<div class="card">
</div> <!-- .card -->
</div><!--/.col-->
<div class="col-lg-12">
<div class="card">
<div class="card-header">
<strong>Change </strong> Password
</div>
<div class="card-body card-block">
<form action="" method="post" enctype="multipart/form-data" class="user" name="changepassword" onsubmit="return checkpass();">
<div class="row form-group">
<div class="col col-md-3"><label for="text-input" class=" form-control-label">Current Password</label></div>
<div class="col-12 col-md-9"><input type="password" name="currentpassword" class=" form-control" required= "true" value=""></div>
</div>
<div class="row form-group">
<div class="col col-md-3"><label for="email-input" class=" form-control-label">New Password</label></div>
<div class="col-12 col-md-9"><input type="password" name="newpassword" class="form-control" value="" required="true"></div>
</div>
<div class="row form-group">
<div class="col col-md-3"><label for="email-input" class=" form-control-label">Confirm Password</label></div>
<div class="col-12 col-md-9"><input type="password" name="confirmpassword" class="form-control" value="" required="true"></div>
</div>
<p style="text-align: center;"> <button type="submit" class="btn btn-primary btn-user btn-block" name="submit" >Change</button></p>
</form>
</div>
</div>
</div>
<div class="col-lg-6">
</div>
</div>
</div><!-- .animated -->
</div><!-- .content -->
</body>
</html>
<?php
include('includes/scripts.php');
include('includes/footer.php');
?>