<?php

$host = "127.0.0.1,1433";
$user = "sa";
$pass = "@121420001697n20030138abcde";
$db = "gc";

$connect = mssql_connect($host,$user,$pass);
$db = mssql_select_db($db,$connect);


    if(isset($_POST['user']) and isset($_POST['pass']) and isset($_POST['newpw']) ){


        $user = $_POST["user"];
        $pass=  md5($_POST["pass"]) ;
        $newpw= $_POST["newpw"] ;



        if(empty($user) or empty($pass)  )
            echo '<script>alert("Preencha todos os campos");</script>';
            echo "<script>history.go(-1)</script>";
        }else{
            $enviar = mssql_query("SELECT * FROM users WHERE Login='{$user}'");
            if( mssql_num_rows($enviar) < 1) {
            echo "<script>alert('Login ou senhas invalidos!A');history,back(-1)</script>";
        }else{
        $enviar = mssql_query("SELECT * FROM users WHERE Login='{$user}' and passwd='{$pass}'");
            if( mssql_num_rows($enviar) < 1) {
            echo "<script>alert('Login ou senhas invalidos!B');history,back(-1)</script>";
            }else{

            if($enviar->num_rows == 1){

                echo "<script>alert('Ocorreu um erro');</script>";
                }else{
                mssql_query("update users set passwd = '$newpw' WHERE Login = '$user'");
                echo "<script>alert('Migração efetuada com sucesso!');</script>";

            }
        }
        }
    }


?>