<?php

					$sql = mysql_query("SELECT password FROM users WHERE id = '".$_SESSION['user']['id']."'");
					$oldPass = md5($_POST['old_pass']);
					$newPass = md5($_POST['new_pass']);
					$pass = mysql_fetch_assoc($sql);
					$password = $pass['password'];
					$newPass2 = md5($_POST['new_pass2']);
					if(isset($_POST['submit']))
					{
						if (empty($_POST['old_pass']) || empty($_POST['new_pass']) )
						{
							echo '<div class="animated shake">
									<div class="message error">Please fill in all fields.</div>
								</div>';
						}
						else
						{
						if($password = $oldPass ){

							mysql_query("UPDATE users SET password = '".$newPass."' WHERE id = '".$_SESSION['user']['id']."' ") or die(mysql_error());
							echo '<div class="animated shake">
									<div class="message success"><b>Congrats!</b> Your password has been changed!</div>
								</div>';
							}else{
								echo '<div class="animated shake">
									<div class="message error">You OLD password didnt match!</div>
								</div>';

							}
						}
							}


				?>

				<div class="box">
					<div class="contentHeader headerGreen">
						<div class="inside">
							Change Your Password
						</div>
					</div>
					<div class="inside">
						<form method="post">


							<div class="form-section">
								<strong></strong><br />
								<input type="password" name="old_pass"  placeholder="Enter your CURRENT password"></textarea>
							</div>


							<div class="form-section">
								<strong></strong><br />
								<input type="password" name="new_pass"  placeholder="Enter your NEW password"></textarea>
							</div>



							<div class="form-section">
								<input type="submit" class="submit" name="submit" value="Submit">
							</div>
						</form>
					</div>
				</div>
			</div>