<?php

 $con = mysql_connect("localhost","root","");
$search =$_POST["user"];
$pword=$_POST["pass"];

$flag=0;
if (!$con)
  {
  die('Could not connect: ' . mysql_error());
  }

mysql_select_db("tcems", $con);
$query="SELECT * FROM tbl_admin where Username='$search'";
$result = mysql_query($query);
$flag=0;
while ($row=mysql_fetch_array($result))
{
   $user=$row[0];
   $pword2=$row[1];
}
include("header.php");
echo"
<html>
<title></title>
<head>    <link rel=STYLESHEET type=text/css href=css/style.css />  </head>

<body>
<div id=all>
<fieldset style=text-align:center>
<form action=Update.php method=POST>
        <table align=center class=login>
        <h1>Update Admin. Account</h1>

            <tr>
                <td><img src=images/user.png width=50 height=50 /></td>
                <td>Username:</td>
                <td><input type=text  name=user value=".$search."></td>
            </tr>

            <tr>
                <td><img src=images/password.png width=50 height=50 /></td>
                <td>Old Password:</td>
                <td><input type=password name=pass></td>
            </tr>


            <tr>
                <td><img src=images/password.png width=50 height=50 /></td>
                <td>New Password:</td>
                <td><input type=password name=verify></td>
            </tr>

            <tr>
                <td><img src=images/password.png width=50 height=50 /></td>
                <td>Verify New Password:</td>
                <td><input type=password name='verifypass'></td>
            </tr>

                    <tr>
                <td>&nbsp</td>
                <td><input type=hidden name=prev value=".$search." ></td>
                   <td><input type=hidden name=prevpass value=".$pword."  ></td> 
            </tr>
            <tr>
                <td />
                <td />
                <td>
                <input type=submit value=UPDATE name=UPDATE>
                <a href=main.php><input type=submit value=Cancel name=cancel></a>
                </td>
            </tr>

        </table>

    </form>
    </fieldset>
</div>
     </body>
</html>
    ";
      mysql_close($con);
     ?>
