changepw().php

<?php

session_start();
if(!isset($_SESSION['username'])) {
header('location:login.php'); }
else { $username = $_SESSION['username']; }
require_once("../koneksi.php");

?>
$dbcon = mysql_connect ('panelku1_db', 'panelku1_db', 'panelku1_db')

$password1 = $_POST['newPassword'];
$password2 = $_POST['confirmPassword'];

$password1 = mysql_real_escape_string($password1);
$password2 = mysql_real_escape_string($password2);

if ($password1 <> $password2) { echo "Your passwords do not match.";}

if (mysql_query(UPDATE user SET password='$password1' WHERE username='$session[username]'))
    {echo "You have successfully changed your password.";}

mysql_close($dbcon);
header("location:home.php");

?>