<?php

    session_start();
    if(isset($_SESSION['s_logged_n']) && $_SESSION['s_logged_n'] == 'true'){

    $username = $_SESSION['s_username'];

    if(isset($_POST['update'])){

    $id = $_GET['id'];

    include "config.php";

    $password=$_GET["password"];
    $password_confirm=$_GET["password_confirm"]

    $password = addslashes(trim($password));
    $password_confirm = addslashes(trim($password_confirm));

    if ($password == $password_confirm){

    $password = md5($password);

    $query = "UPDATE users SET password = '$password' WHERE user_id = '$id' AND username = '$username' LIMIT 1";
    $result = mysql_query($query);

    if($result){
    echo "You have successfully edited your password";
    } else {

    echo "There was an error editing your password";
    }
    } else {

    echo "Your passwords don't match each other";
    }
    }
    } else {
    echo "You must be logged in to access this area";
    }
    ?>