<?php
setcookie("CookieUname", $mailadres,(time()+604800)); 
$reqlevel = 1;
include("membercheck.inc.php");
$Uname = @$HTTP_COOKIE_VARS["rememberCookieUname"];
// 獲取用戶提交數據
$pass= md5($_POST["pass"]);
$newpass1= md5($_POST["newpass1"]);
$newpass2= md5($_POST["newpass2"]);

mysql_query("set names gbk");
$query = "select * from ".$DBprefix."users where mailadres='$Uname'";
$result=mysql_query($query);
$data = @mysql_fetch_array($result); 
$id=$data[0];
$password=$data[2];

if ($pass==$password)
{ 
if ($newpass1!=$newpass2)
echo 您輸入的兩次密碼不一樣！;
else
{mysql_query("set names gbk");
$query = "UPDATE ".$DBprefix."users  SET password = '$newpass1' WHERE mailadres='$Uname'"; 
mysql_query($query);  
header("Location: home.php?$id");}

}
else
echo 您輸入的原始密碼不正確！;
?>