function editUser($username, $password, $type, $oldname)
{
    $oldpass = "SELECT password FROM user_accounts WHERE username='".mysql_real_escape_string($oldname)."';";
    $passhash = sha1($password);
    if ($oldpass == $passhash) {
        $sql = "UPDATE user_accounts SET username='".mysql_real_escape_string($username).",account_type='".mysql_real_escape_string($type)."' WHERE username='".mysql_real_escape_string($oldname)."';";
    }
    else {
        $sql = "UPDATE user_accounts SET username='".mysql_real_escape_string($username)."',password='".mysql_real_escape_string($passhash)."',account_type='".mysql_real_escape_string($type)."' WHERE username='".mysql_real_escape_string($oldname)."';";
    }
        return $sql;
}