Untitled

<?
include('config/site.php');
if ($_POST['s'] == 1){
$u=$_POST['user'];
$p=$_POST['pass'];
$pass = md5($p.':'.PASSWORD_SALT);

$con = mysql_connect(DB_SERVER,DB_USERNAME,DB_PASSWORD);
if (!$con)
  {
  die('Could not connect: ' . mysql_error());
  }

mysql_select_db(DB_DATABASE, $con);
mysql_query("UPDATE Users SET uPassword = '$pass'
WHERE uName = '$u'");
mysql_close($con);
echo' There I fixed your stupid. Your new password is "'.$p.'". Don\'t loose it again.<br/>';
}
else
echo'<html><head><title>Who says you can\'t fix stupid.</title></head><body>
<form action="fixstupid.php" method="post">
Username:<input name="user" type="text" />
New Pass:<input name="pass" type="text" />
<input name="s" type="hidden" value="1" />
<input name="" type="submit" />
</form><body>';
?>