gantipw().php

<?php

$pwlama = $_POST['pwlama'];
$pass = $_POST['confirm_password'];
$cekuser = mysql_query("SELECT * FROM user WHERE username = '$username'");
$jumlah = mysql_num_rows($cekuser);
$hasil = mysql_fetch_array($cekuser);

if ($pwlama !== $hasil['password']) {
    GAGAL
} else {
  $simpan = mysql_query("UPDATE user SET password=$pass WHERE username = '$username'");

if ($simpan) {
    Berhasil
} else {
    GAGAL 2
   }
}

?>