upload confirm_password file

user/confirm_password.php

+<?php
+	include('session.php');
+	
+	$cid=$_POST['chatid'];
+	$pass=$_POST['chat_pass'];
+	
+	$query=mysqli_query($conn,"select * from chatroom where chatroomid='$cid'");
+	$row=mysqli_fetch_array($query);
+	
+	if ($row['chat_password']==$pass){
+		mysqli_query($conn,"insert into chat_member (chatroomid, userid) values ('$cid', '".$_SESSION['id']."')");
+		header('location: chatroom.php?id='.$cid);
+	}
+	
+	else{
+		?>
+		<script>
+			window.alert('Incorrect Password!');
+			window.history.back();
+		</script>
+		<?php
+	}
+?>
\ No newline at end of file