if(isset($_POST['reset'])){
			$idnum = mysql_real_escape_string(htmlspecialchars($_POST['idnum']));
			$idnum=trim($idnum);
			$query = mysql_fetch_assoc(mysql_query("Select password from mdl_user where username='$idnum'"));
				if($query == ''){
					$_SESSION['msg']['iderr'] = 'idERR';
				}else{
					$pass = md5($idnum);
					mysql_query("UPDATE mdl_user SET password='$pass' WHERE username='$idnum'")
								 or die(mysql_error());
					$_SESSION['msg']['success'] = 'succ';
				}

				if($_SESSION['msg']['iderr']=='idERR'){
					echo '<script language="JAVASCRIPT">window.alert("ID number does not exist!")</script>';
					unset($_SESSION['msg']['iderr']);

				}

				if($_SESSION['msg']['success']=='succ'){
					echo '<script language="javascript">alert("Your password is changed to your ID number!")</script>';
					unset($_SESSION['msg']['success']);
					unset($_SESSION['reset']);
				}
		}