<?php
if(isset($_POST['submit'])) {
	if(!empty($_POST['password2'])) {
		$pass   = md5($_POST['password2']);
		$myname = $_POST['username'];
		mysql_query("UPDATE users SET password = '".$pass."' WHERE username = '".$myname."'");
		echo '<font color="green">Your Password has succesfully been changed</font><br>';
	}
	if(!empty($_POST['email2'])) {
		$email  = strip_tags(mysql_real_escape_string($_POST['email2']));
		$myname = $_POST['username'];
		mysql_query("UPDATE users SET email = '".$email."' WHERE username = '".$myname."'");
		echo '<font color="green">Your Email has succesfully been changed</font><br>';
	}
}
?>
<div id="contentLeft">
        <div class="contentHolder">
                        <div class="contentHeader">
                Change your password            </div>
            <form method="post" action="?password">
                <br />
                New Password: <br />
                <input type="password" name="password2" />
                <br />
                Retype password: <br />
                <input type="password" name="password3" />
				<input type="hidden" name="username" value="%HabboName%">
			   <br /><br />
                <input type="submit" value="Change your password" name="submit" />
            </form>
        </div>
        <div class="contentHolder">
            <div class="contentHeader">
                Change your email address            </div>
            <br />            <form method="post" action="?email">

		<input type="hidden" name="username" value="%HabboName%">

                New Email<br />
                <input type="text" name="email2" /><br />
                <br />
                <input type="submit" value="Change your email" name="submit" />
            </form>
        </div>
    </div>