<?php 

$id=$_POST['id'];
$pl=md5($_POST['pl']);
$pb=md5($_POST['pb']);
$kp=md5($_POST['kp']);
$query=mysql_query("select*from admin where id_admin='$id'");
$dta=mysql_fetch_array($query);



 if($pl <> $dta['password'])
{
	echo "<script>alert('password lama anda salah');location.href='?page=ganti_pass_admin'</script>";
}
 else if($pb <> $kp)
{
	echo "<script>alert('password baru dan password konfirmasi tidak sesuai');location.href='?page=ganti_pass_admin'</script>";
}
    else
    {
        
$update=mysql_query("update admin set password='$pb' where id_admin='$id'")or die(mysql_error());
        copy($_FILES['foto']['tmp_name'],"foto/".$foro);
    }
if($update)
{
	echo "<script>alert('berhasil merubah password');location.href='?page=profil_admin'</script>";
}

?>