if ($_REQUEST['newpassword'] == $_REQUEST['verification'])

    if ($_REQUEST['submitted'] == TRUE) {
    $sql = "UPDATE members SET password ='".$_REQUEST['newpassword']."' WHERE username ='".$_SESSION['usr']."' ";
    mysql_query($sql);
    echo "<p class=\"win\">Your password has been changed.</p>";
    }
else {
    if ($_REQUEST['submitted'] == TRUE) {
    echo "<p class=\"fail\">The Passwords do not match.</p>";
    }}