-
- $q="select * from users where login='$login'";
- $set=$db->query($q);
- $set->next();
- if ($set->getString('password')!=md5($old_password)) {
- $error="bad password";
+ require_once(INCLUDE_DIR."eventz/login.inc");
+ if(!login_check($user_id, $old_password)) {
+ $error="bad password";