Untitled

<?php
  session_start();
  require "connect.php";
  $username = $_SESSION['username'];
  $roll_no = $_SESSION['rollno'];
?>
<!DOCTYPE html>
<html>

  <head>
    <meta charset="utf-8">
    <title><?php echo $username;?> | Password</title>
    <link rel="stylesheet" href="css/main.css">
    <link rel="stylesheet" href="css/forms.css">
    <style media="screen">
    html,body{
      background-image: none;
    }
      .form-contain{
        margin: 100px auto;
        width: 400px;
        height: auto;
        background-color: #ffffff;
        padding: 30px;
        text-align: center;
        box-sizing: border-box;
        border: 1px solid #ccc;
      }
      .nav{
          box-shadow: 0px 5px 15px #ccc;
      }
    </style>
  </head>
  <body>
    <header>
      <div class="nav">
        <ul>
          <li class="has-dropdown"><span><a href="alumni_profile.php" id="profile"><?php echo "$username"; ?></a></span>
            <div class="dropdown-content">
              <ul>
                <li><a href="alumni_edit_profile.php">Edit</a></li>
                <li><a href="alumni_edit_password.php">Password</a></li>
              </ul>
            </div>
          </li>

          <li><span><a href="alumni_posts.php">Post</a></span></li>
          <li><span ><a href="alumni_chat.php">Chat</a></span></li>
          <li ><span ><a href="alumni_send_reports.php">Report</a></span></li>
          <li><span ><a href="index.php" id="log">logout</a></span></li>
        </ul>
      </div>
    </header>
    <main>
      <div class="form-contain">
        <?php
        $conn = new mysqli(server,username,password,database);
        if ($conn->connect_error) {
          die("Connection failed: " . $conn->connect_error);
        }


        if ($_SERVER["REQUEST_METHOD"] == "POST") {

          $currentPassword = $_POST['password'];
          $newpassword = $_POST['newpassword'];
          $renewpassword = $_POST['renewpassword'];

          $sql = "SELECT password FROM alumniStudent WHERE username = '$username' AND rollno ='$roll_no'";
          $result =$conn->query($sql);
          $row = $result->fetch_assoc();

           if ($currentPassword == $row['password']){

             if ($newpassword === $renewpassword) {

               $edit= "UPDATE alumniStudent SET password ='$newpassword' WHERE username ='$username' AND rollno ='$roll_no'";
               if($conn->query($edit) === true){
                  echo "<center><p style = 'color:red'>"."Saved"."</p></center>";
               }else{
                   echo "<center><p style = 'color:red'>"."Failed"."</p></center>";
                }


             }else {
               echo "<p style = 'color:red'>"."password not match"."</p>";
             }
         }else {
           echo "<p style = 'color:red'>"."current password not match"."</p>";
         }
       }

        ?>
        <form class="form-content" action="<?php echo htmlspecialchars($_SERVER["PHP_SELF"]);?>" method="post">
          <div class="">
             <h3 style = 'color: #21d4fd'>Edit <?php echo $username;?> Possword</h3>
          </div>
          <label for="newpassword"><input type="password" name="newpassword" value="" required="required" value="" placeholder="New possword"></label><br>
          <label for="renewpassword"><input type="password" name="renewpassword" value="" required="required" value="" placeholder="reEnter"></label><br>
          <label for="password"><input type="password" name="password" value="" required="required" placeholder="current password"></label><br>
          <label for="login"><input type="submit" name="" value="Save"></label>
        </form>
      </div>
    </main>
  </body>
</html>