<?php
include 'dbconnect.php';

if(isset($_POST['submit']))
		{
		$old_pass=$_POST['pwd'];
		$new_pass=$_POST['newpassword'];
		$re_pass=$_POST['confirmpassword'];
		$query = mysqli_query($conn,"select * from login where id='1'");
		$row = mysqli_fetch_assoc($query);
		$check_old_pass=$row['pwd'];
		if($old_pass==$check_old_pass)
		{
			if($new_pass!==$re_pass)
			{
				 // echo "<script> alert('New Password doesn't match); window.location.href='changepwd.php'; </script>";
				echo "Incorrect password";

			}
			else{
				mysqli_query($conn,"UPDATE login SET pwd='$new_pass' WHERE id='1'");
 				 echo "<script> alert('Password Changed'); window.location.href='shop.php'; </script>";

			}
			
		}	
		else
		{
			 echo "<script> alert('Old Password is incorrect'); window.location.href='change_pwd.php'; </script>";

		}
		
		

	}
?>