<?php
require_once('conn.php');
header("Content-type: text/html; charset=utf-8");
//echo $password.'555555';
if (isset($_POST['adminupdate'])) {
session_start();
$a=$_SESSION['password'];
$Id=$_GET["Id"];
$username = trim($_POST['username']);
$password1 = trim($_POST['password1']);
$password2 = trim($_POST['password2']);
$nns = trim($_POST['nns']);

$b=md5($_POST['password']);
//echo $a.'分割',$b;


if ($a!=$b) {         //判斷舊密碼是否匹配
 echo "<script>alert('舊密碼輸入錯誤！');location.href='admin_list.php';</script>";
 exit;
 }
 
 if ($password1!=$password2) {         //判斷新密碼是否匹配
 echo "<script>alert('兩次密碼不一致！');location.href='admin_list.php';</script>";
 exit;
 }
 
$password2 = md5($password2);
 $sql = "update admin set username='$username',password='$password2',nns='$nns' where Id=".$Id;
  mysql_query($sql);
      //echo $sql;die();
 echo "<script>alert('修改成功！');location.href='admin_list.php';</script>";  
}
?>