#!c:/perl/bin/perl.exe -w

use CGI qw(:standard);
use CGI::Carp "fatalsToBrowser";
use Win32::ODBC;
use CGI::Cookie;

$query = new CGI;
#The parameter's must be in small letter

$customerid = $query->param('customerid');
$old = $query->param('t1');
$new = $query->param('t2');
$con = $query->param('t3');

#won't work if the if you had declared header.

print $query->header;
print $query->start_html('Changing the password');



# initialised the database
$DSN = "video";
if (!($db = new Win32::ODBC("DSN=$DSN;UID=admin;PWD=password;"))){
    print "Error connecting to $DSN\n";
    print "Error: " . Win32::ODBC::Error() . "\n";
    exit;
}


print "ok";

print "$old";
print "$new";
print "$con";


$SqlStatement = "SELECT * FROM Customers where CustomerID =$customerid";
if ($db->Sql($SqlStatement)){
   		 print "SQL failed.\n";
   		 print "Error: " . $db->Error() . "\n";
    		 $db->Close();
    		 exit;
		 }



print "ok1";
print "customerid : $customerid";
#print "tries :$tries";



while ($db->FetchRow()){

    %Data=$db->DataHash;
    if ($Data{Password} eq $old)
    { 
      if ($new eq $con) 
         {
	      $SqlStatement = "update Customers set Password = $new where CustomerID = $Data{CustomerID} ";
		if ($db->Sql($SqlStatement))
            {
    			print "SQL failed.\n";
    			print "Error: " . $db->Error() . "\n";
    			$db->Close();
    		      exit;
		}
            print "Password changed";
		print "<script>document.URL=\"/script/profile.cgi\"</script>";
         }
    else {
            print "<script>document.URL=\"/script/check.cgi\"</script>";
         }
    }
    else 
    { 
	#print "ok2";
	#print "ok3 : $old";
	#print "ok4 : $Data{Password}";
      print "<script>document.URL=\"/script/check.cgi\"</script>";
	#print redirect('/login.html');
    }
}

$db->Close();