<?php
require_once('conn.php');
session_start(); 

$opass=$_POST['opass'];
$pass=$_POST['pass'];
$pass2=$_POST['pass2'];

if ($pass!=$pass2)
{
echo "<script>confirm('兩次輸入密碼不一樣.');history.go(-1);</script>"; 
Exit;
}

$exec="Select * from hy3 where name='".$_SESSION['name']."'"; 
mysql_query("set names gbk");
$resu=mysql_query($exec);
$rs=mysql_fetch_object($resu);

if ($opass!=$rs->pass)
{
echo "<script>confirm('原密碼錯誤！');history.go(-1);</script>"; 
Exit;
}

$exec="update hy3 set pass='".$pass."' where name='".$_SESSION['name']."'"; 
mysql_query("set names gbk"); 
mysql_query($exec); 
mysql_close();

echo "<script>confirm('更換密碼成功！');history.go(-1);</script>"; 
?>