function isCorrectOldPass($userId, $password)
		{
			$userData = CUser::GetByID($userId)->Fetch();

			$salt = substr($userData['PASSWORD'], 0, (strlen($userData['PASSWORD']) - 32));

			$realPassword = substr($userData['PASSWORD'], -32);
			$password = md5($salt.$password);

			return ($password == $realPassword);
		}

		$pass_error = false;

		if($_REQUEST["NEW_PASSWORD"] <> '' && $arUser['EXTERNAL_AUTH_ID'] == '')
		{
			$arFields["PASSWORD"] = $_REQUEST["NEW_PASSWORD"];
			$arFields["CONFIRM_PASSWORD"] = $_REQUEST["NEW_PASSWORD_CONFIRM"];
			if (empty($_REQUEST["OLD_PASSWORD"])){
				$strError.= "Не введен старый пароль";
				$pass_error = true;
			}
			else if (!isCorrectOldPass($arResult["ID"],$_REQUEST["OLD_PASSWORD"])){
				$strError.= "Не верно введен старый пароль";
				$pass_error = true;
			}
		}