FreeCodeCamp/HelpBackEnd

  // Check whether the Submit Button is Clicked or not
  if(isset($_POST['submit']))
  {
    //echo "Cliked";
    //1. Get the Data From Form
    $id=$_POST['id'];
    $current_password = md5($_POST['current_password']);
    $new_password =md5($_POST['new_password']);
    $confirm_password  = md5($_POST['confirm_password']);
    //2.Check whether the user with current id and password exist or not
    $sql = "SELECT * FROM tbl_admin WHERE id=$id AND password='$current_password'";
    // Execute the Query
    $res = mysqli_query($conn,$sql);
    if($res==true)
    {
      //Check whether data is avilable or not
      $count = mysqli_num_rows($res);
      if($count==1)
      {
        //User Exist and Password Can be Changed
        //echo "User Found";
        //Check whether the new password and confirm match or not
        if($new_password==$confirm_password)
        {
          //Update the Password
          //echo "Password Match";
          $sql2 = "UPDATE tbl_admin SET passowrd = '$new_password' WHERE id=$id";
          //Execute the Query
          $res2 = mysqli_query($conn, $sql2);
          //Check whether the query executed or not
          if($res2==true)
          {
            //Display Succes Message
            //Redirect to MNG Admin Page with Success Message
            $_SESSION['change-pwd'] = "<div class='success'>Password Changed Successfully.</div>";
            //Redirect the User
            header('location:'.SITEURL.'admin/mng-admin.php');
          }else{
            //Display Erorr Message
            //Redirect to MNG Admin Page with Erorr Message
            $_SESSION['change-pwd'] = "<div class='error'>Failed to Change Password.</div>";
            //Redirect the User
            header('location:'.SITEURL.'admin/mng-admin.php');
            }
         }
         else
         {
          //Redirect to MNG Admin Page with Erorr Message
          $_SESSION['pwd-not-match'] = "<div class='error'>Password Did Not Match.</div>";
          //Redirect the User
          header('location:'.SITEURL.'admin/mng-admin.php');
        }
      }else{
        //User Does not Exist Set Message and Redirect
        $_SESSION['user-not-found'] = "<div class='error'>User Not Found.</div>";
        //Redirect the User
        header('location:'.SITEURL.'admin/mng-admin.php');
      }

    }
    //3. Check whether the New Password and Confirm Password Match or Not

    //4. Change Password if all above is true

  }


?>