Upload update_account File

user/update_account.php

+<?php
+	include('session.php');
+	
+	$mname=$_POST['mname'];
+	$cpassword=md5($_POST['cpassword']);
+	$apassword=md5($_POST['apassword']);
+	$mpassword=$_POST['mpassword'];
+	$musername=$_POST['musername'];
+	
+	$myq=mysqli_query($conn,"select * from `user` where userid='".$_SESSION['id']."'");
+	$myqrow=mysqli_fetch_array($myq);
+	
+	if ($cpassword!=$apassword){
+		?>
+		<script>
+			window.alert('Verification Password did not match!');
+			window.history.back();
+		</script>
+		<?php
+	}
+	
+	elseif ($cpassword!=$myqrow['password']){
+		?>
+		<script>
+			window.alert('Current Password did not match!');
+			window.history.back();
+		</script>
+		<?php
+	}
+	
+	else{
+		if ($mpassword==$myqrow['password']){
+			$newpassword=$mpassword;
+		}
+		else{
+			$newpassword=md5($mpassword);
+		}
+		
+		mysqli_query($conn,"update `user` set username='$musername', password='$newpassword', uname='$mname' where userid='".$_SESSION['id']."'");
+		?>
+		<script>
+			window.alert('Changes Saved!');
+			window.history.back();
+		</script>
+		<?php
+	}
+
+?>
\ No newline at end of file