<?php
$uname=$_POST['txtUname'];
$prepass=$_POST['txtNewPass'];
$confpass=$_POST['txtConPass'];

if(strLen($prepass)>0){
if($prepass==$confpass){
$query="update tbl_users set pass=PASSWORD('".mysql_real_escape_string($prepass)."') where uname='".mysql_real_escape_string($uname)."'";
  try{
  mysql_query($query);
    echo "<span class=\"ok\">Successfully Changed Password</span>\n";
  }catch(Exception $err){
    echo "<span class=\"err\">".mysql_error()."</span>\n";
  }
  }else{
    echo "<span class=\"err\"><b>Password</b> and <b>Confirmed Password</b> are not matched.<br>Try again.</span>\n";
  }
}

?>

<form method="post">
<table style="margin:5px;" id="uEdit">
<tr>
<td width="150">User Name</td>
<td><input type="text" value="admin" name="txtUname" readonly></td>
</tr>
<tr><td>&#160;</td></tr>
<tr>
<td>New Password</td>
<td><input type="password" name="txtNewPass"></td>
</tr>
<td>Confirm Password</td>
<td><input type="password" name="txtConPass"></td>
</tr>
<tr><td>&#160;</td></tr>
<tr><td colspan="2" align="center"><input type="submit" value="Change Password"></td></tr>
</table>
</form>