aksi

<?php
include 'config.php';

$user=$_POST['user'];
$lama=$_POST['lama'];
$baru=$_POST['baru'];
$ulang=$_POST['ulang'];

$cek=mysql_query("select * from tb_pengawas where password='$lama' and username='$user'");
if(mysql_num_rows($cek)==1){
	if($baru==$ulang){
		$b = $baru;
		$edit="update tb_pengawas set password='$b' where username='$user'";
		mysql_query($edit);
		header("location:ganti_pass.php?pesan=oke");
	}else{
		header("location:ganti_pass.php?pesan=tdksama");
	}
}else{
		header("location:ganti_pass.php?pesan=gagal");
}

 ?>