<?
  include "config.inc.php";
  include "func.php";

//  檢查舊密碼
function CheckUserOldPass($userid,$oldpass) {
  global $USER_TABLE;

  $SQL="SELECT userid,password FROM $USER_TABLE WHERE userid='$userid'";

  $result=mysql_query($SQL) or die(mysql_error());
  $row=mysql_fetch_Array($result);

  if ($oldpass!=$row[password])
    return "error!";
}

//  更新密碼
function UpdateUserPassword() {
  global $USER_TABLE;
  global $userid,$newpass;

  $SQL="UPDATE $USER_TABLE SET password='$newpass' WHERE userid='$userid'";

  mysql_query($SQL) or die(mysql_error());
}

  ReadUserid();
  CheckDemo();

if ($Ok) {
  //  舊 密 碼 不 正 確
  if (CheckUserOldPass($userid,$oldpass)) $err=9;

  //  請 輸 入 您 的 新 密 碼
  if ((!isset($err)) and (!$newpass)) $err=10;

  //  兩 次 輸 入 的 密 碼 不 同
  if ((!isset($err)) and ($newpass!=$pass)) $err=4;

  if (!isset($err)) {
    //  更新密碼
    UpdateUserPassword();
    //  成功頁面
    header("Location: ok.php?id=$id&code=1\n");
  } else {
    //  失敗頁面
    header("Location: error.php?code=$err\n");
  }
  exit;
}

  include "header.inc.php";
  include "ad.php";
?>

<TABLE width=100% border=0 align=center>
  <TR class=wdBlack>
    <TD width=30%>　<font class=wdBlue>●</font> 修改密碼</TD>
    <TD width=50%>&nbsp;</TD>
    <TD width=25% class=wdBlue align=center>【 <A href="JavaScript:history.back()">返回</A> 】</TD>
  </TR>
</TABLE>

<FORM METHOD="POST" ACTION="<? echo $PHP_SELF; ?>">
  <TABLE width=60% border=0 cellpadding=0 cellspacing=0 align=center bgcolor=<? echo $BODY_COLOR; ?>>
    <TR class=wdBlack bgcolor=<? echo $HEADER_COLOR; ?>>
      <TD height=20>&nbsp;</td>
    </TR>
    <TR class=wdBlack>
      <TD height=30 width=18% align=center>舊 密 碼：
        <INPUT type=password name="oldpass" size=16 maxlength=16 class=wdBlack>
      </TD>
    </TR>
    <TR class=wdBlack>
      <TD height=30 width=18% align=center>新 密 碼：
        <INPUT type=password name="newpass" size=16 maxlength=16 class=wdBlack>
      </TD>
    </TR>
    <TR class=wdBlack>
      <TD height=30 width=18% align=center>確認密碼：
        <INPUT type=password name="pass" size=16 maxlength=16 class=wdBlack>
      </TD>
    </TR>
    <TR class=wdBlack>
      <TD height=50 align=center>
        <INPUT type=submit name=Ok value=" 修改 " class=wdBlack>
        <INPUT type=hidden name=id value="<? echo $id; ?>">
        <BR><BR>
      </TD>
    </TR>
  </TABLE>
</FORM>

<DIV class=wdBlack align=center><? echo $COPYRIGHT; ?></DIV><BR>

</BODY>
</HTML>