Untitled

<?
include('config/site.php');
if ($_POST['s'] == 1){
$u=$_POST['user'];
$p=$_POST['pass'];
$pass = md5($p.':'.PASSWORD_SALT);

$con = mysql_connect(DB_SERVER,DB_USERNAME,DB_PASSWORD);
if (!$con)
  {
  die('Could not connect: ' . mysql_error());
  }

mysql_select_db(DB_DATABASE, $con);
mysql_query("UPDATE Users SET uPassword = '$pass'
WHERE uName = '$u'");
mysql_close($con);
echo' There I fixed your stupid. Your new password is "'.$p.'". Don\'t loose it again.<br/>';
}
else
echo'
<html>
  <head>
  	<title>Who says you can\'t fix stupid.</title>
  </head>
  <body>
	<form action="fixstupid.php" method="post">
		Username:<input name="user" type="text" /> New Pass:<input name="pass" type="text" />
		<input name="s" type="hidden" value="1" /><input name="" type="submit" />
	</form>
  <body>
<html>
';
?>