<?php
if(isset($_POST['new_password']))
  {
    $username = $_SESSION['member_username'];
    $newpassword = mysql_real_escape_string($_POST['newpassword']);
        $newpassword2 = $newpassword;
    $newpassword = l2j_encrypt($newpassword);


    // Updating the database information
    $update = mysql_query("UPDATE accounts SET password = '$newpassword', password2 = '$newpassword2' WHERE login = '$username' LIMIT 1") or die(mysql_error());
    echo 'Password was successfully changed!';

    }
else {
echo
'
<h2>Change Password</h2><br>
<p>Fill in your new password and press "Change Password" to change it.</p>
<form method="post" action="">
<input type="password" name="newpassword">
<input type="submit" value="Change Password" id="new_password" name="new_password">
</form><br>
<a href="index.php?op=member">Go Back</a>
';
}
?>