When first inserting the password into the database, run this first:
http://us2.php.net/md5
Then when the user types in the old password, run the same thing and then compare this to the password stored in the database. Should be basically:
if (oldpassword = passwordinDB)
run sql query
You'll just need to do the exact syntax and also grab the password from the DB before you do that and store it in something temporary
Matt
|