ADMIN_ChangeUserPassword

ALTER PROCEDURE [dbo].[ADMIN_ChangeUserPassword]
    @Email VARCHAR(128),
    @OldPassword VARCHAR(32),
    @NewPassword VARCHAR(32)
AS
BEGIN
    SET NOCOUNT ON;
    DECLARE @MD5Password VARCHAR(32)
    DECLARE @MD5FromPwd VARCHAR(32)
    SELECT @MD5Password = MD5Password FROM Accounts WHERE email = @Email
    IF (@@RowCount > 0)
    BEGIN
        EXEC FN_CreateMD5Password @OldPassword, @MD5FromPwd OUTPUT
        IF (@MD5Password <> @MD5FromPwd)
        BEGIN
            SELECT 'Error: Old password was invalid.' AS Result
            RETURN
        END
        ELSE
        BEGIN
            EXEC FN_CreateMD5Password @NewPassword, @MD5FromPwd OUTPUT
            UPDATE Accounts SET MD5Password = @MD5FromPwd WHERE email = @Email
        END
    END
    ELSE
    BEGIN
        SELECT 'Error: No email address specified.' AS Result
        RETURN
    END
    SELECT 'Success: Change password is complete.' AS Result
    RETURN
END